100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 45)
[ 255.543198][ T8455] loop4: detected capacity change from 0 to 94
[ 255.555974][ T8457] loop1: detected capacity change from 0 to 82
[ 255.562860][ T8458] loop2: detected capacity change from 0 to 512
[ 255.583550][ T8458] FAULT_INJECTION: forcing a failure.
[ 255.583550][ T8458] name failslab, interval 1, probability 0, space 0, times 0
[ 255.596255][ T8458] CPU: 0 PID: 8458 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 255.597773][ T8455] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 255.604940][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 255.604953][ T8458] Call Trace:
[ 255.604992][ T8458]
[ 255.604999][ T8458] dump_stack_lvl+0xd6/0x122
[ 255.605025][ T8458] dump_stack+0x11/0x1b
[ 255.638255][ T8458] should_fail+0x23c/0x250
[ 255.642672][ T8458] ? __d_alloc+0x36/0x370
[ 255.646991][ T8458] __should_failslab+0x81/0x90
[ 255.651764][ T8458] should_failslab+0x5/0x20
[ 255.656325][ T8458] kmem_cache_alloc+0x4f/0x320
[ 255.661247][ T8458] __d_alloc+0x36/0x370
[ 255.665399][ T8458] d_alloc+0x2a/0x110
[ 255.669363][ T8458] __lookup_hash+0x8f/0x180
[ 255.673852][ T8458] filename_create+0xfc/0x270
[ 255.678553][ T8458] do_mkdirat+0x53/0x2c0
[ 255.682811][ T8458] __x64_sys_mkdir+0x40/0x50
[ 255.687385][ T8458] do_syscall_64+0x44/0xd0
[ 255.691824][ T8458] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 255.697705][ T8458] RIP: 0033:0x7fd1bff4dbf7
[ 255.702101][ T8458] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 255.721749][ T8458] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 255.730288][ T8458] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 255.738251][ T8458] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 255.746274][ T8458] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 255.754229][ T8458] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 255.762205][ T8458] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 255.770285][ T8458]
[ 255.777725][ T8457] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:43:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480081002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="484788002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 255.809037][ T8457] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 255.829242][ T8455] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 255.899838][ T8457] loop1: detected capacity change from 0 to 82
[ 255.901982][ T8455] loop4: detected capacity change from 0 to 94
[ 255.913323][ T8457] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 255.923772][ T8455] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:43:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="484888002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:37 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 255.941542][ T8457] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 255.951167][ T8455] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
08:43:37 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd21, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:37 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa4c7, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 256.074392][ T8474] loop1: detected capacity change from 0 to 82
[ 256.097427][ T8477] loop4: detected capacity change from 0 to 94
08:43:37 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 46)
08:43:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00w\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 256.118895][ T8477] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 256.120950][ T8474] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 256.165572][ T8479] loop2: detected capacity change from 0 to 512
[ 256.172107][ T8474] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 256.183606][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=8481 comm=syz-executor.5
[ 256.183610][ T8477] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 256.184071][ T8479] FAULT_INJECTION: forcing a failure.
[ 256.184071][ T8479] name failslab, interval 1, probability 0, space 0, times 0
[ 256.218563][ T8479] CPU: 1 PID: 8479 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 256.227267][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 256.237371][ T8479] Call Trace:
[ 256.240652][ T8479]
[ 256.243595][ T8479] dump_stack_lvl+0xd6/0x122
[ 256.248274][ T8479] dump_stack+0x11/0x1b
[ 256.252535][ T8479] should_fail+0x23c/0x250
[ 256.256954][ T8479] ? security_inode_alloc+0x30/0x180
[ 256.262320][ T8479] __should_failslab+0x81/0x90
[ 256.267092][ T8479] should_failslab+0x5/0x20
[ 256.271680][ T8479] kmem_cache_alloc+0x4f/0x320
[ 256.276447][ T8479] security_inode_alloc+0x30/0x180
[ 256.281576][ T8479] inode_init_always+0x214/0x3e0
[ 256.286525][ T8479] ? set_qf_name+0x230/0x230
[ 256.291180][ T8479] new_inode_pseudo+0x6f/0x190
[ 256.296024][ T8479] new_inode+0x21/0x100
[ 256.300180][ T8479] __ext4_new_inode+0x13f/0x2fc0
[ 256.305198][ T8479] ? avc_has_perm+0xd5/0x160
[ 256.309788][ T8479] ext4_mkdir+0x28a/0x760
[ 256.314174][ T8479] vfs_mkdir+0x2c8/0x3d0
[ 256.318431][ T8479] do_mkdirat+0x12e/0x2c0
[ 256.322773][ T8479] __x64_sys_mkdir+0x40/0x50
[ 256.327366][ T8479] do_syscall_64+0x44/0xd0
[ 256.331823][ T8479] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 256.337786][ T8479] RIP: 0033:0x7fd1bff4dbf7
[ 256.342203][ T8479] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 256.362030][ T8479] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 256.370457][ T8479] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 256.378438][ T8479] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 256.386597][ T8479] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 256.394583][ T8479] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 256.402601][ T8479] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 256.410601][ T8479]
[ 256.443881][ T8477] loop4: detected capacity change from 0 to 94
[ 256.453481][ T8474] loop1: detected capacity change from 0 to 82
[ 256.475717][ T8474] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 256.504293][ T8474] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 256.543752][ T8477] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 256.561205][ T8477] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 256.707470][ T1849] device hsr_slave_0 left promiscuous mode
[ 256.723890][ T1849] device hsr_slave_1 left promiscuous mode
[ 256.732319][ T1849] device veth1_macvtap left promiscuous mode
[ 256.738381][ T1849] device veth0_macvtap left promiscuous mode
[ 256.744419][ T1849] device veth1_vlan left promiscuous mode
[ 256.750178][ T1849] device veth0_vlan left promiscuous mode
[ 257.011476][ T1849] bond0 (unregistering): Released all slaves
[ 257.864772][ T8484] chnl_net:caif_netlink_parms(): no params data found
[ 257.900228][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[ 257.907319][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state
[ 257.916196][ T8484] device bridge_slave_0 entered promiscuous mode
[ 257.923315][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[ 257.930364][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state
[ 257.939215][ T8484] device bridge_slave_1 entered promiscuous mode
[ 257.958068][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 257.968532][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 257.987063][ T8484] team0: Port device team_slave_0 added
[ 257.993284][ T8484] team0: Port device team_slave_1 added
[ 258.007859][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 258.014860][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 258.040744][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 258.051809][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 258.058798][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 258.084924][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 258.108406][ T8484] device hsr_slave_0 entered promiscuous mode
[ 258.114918][ T8484] device hsr_slave_1 entered promiscuous mode
[ 258.169769][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[ 258.176838][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 258.184071][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[ 258.191121][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 258.220669][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0
[ 258.231917][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 258.241216][ T2007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 258.265142][ T2007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 258.287564][ T8484] 8021q: adding VLAN 0 to HW filter on device team0
[ 258.306979][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 258.317748][ T2007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 258.324802][ T2007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 258.343105][ T8484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 258.353534][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 258.398708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 258.411376][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 258.418475][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 258.428205][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 258.437147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 258.447044][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 258.455374][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 258.464316][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 258.473166][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 258.485551][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 258.492850][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 258.501137][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 258.605820][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 258.650517][ T8499] chnl_net:caif_netlink_parms(): no params data found
[ 258.716897][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 258.723953][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 258.733353][ T8499] device bridge_slave_0 entered promiscuous mode
[ 258.742705][ T8484] device veth0_vlan entered promiscuous mode
[ 258.750729][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 258.759151][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 258.769174][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 258.776229][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 258.783911][ T8499] device bridge_slave_1 entered promiscuous mode
[ 258.798994][ T8484] device veth1_vlan entered promiscuous mode
[ 258.807024][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 258.815299][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 258.823298][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 258.846478][ T8484] device veth0_macvtap entered promiscuous mode
[ 258.853730][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 258.862185][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 258.872256][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 258.882370][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 258.892752][ T8484] device veth1_macvtap entered promiscuous mode
[ 258.902699][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 258.911012][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 258.923416][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 258.933919][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.943824][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 258.954240][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.964052][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 258.974465][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.984287][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 258.994713][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 259.006823][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 259.015313][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 259.032455][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 259.040899][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 259.050330][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 259.060770][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 259.070723][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 259.081232][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 259.091056][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 259.101520][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 259.111444][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 259.122244][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 259.134380][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 259.147285][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 259.155863][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 259.165590][ T8499] team0: Port device team_slave_0 added
[ 259.184574][ T8499] team0: Port device team_slave_1 added
[ 259.213453][ T8526] loop3: detected capacity change from 0 to 80
[ 259.221719][ T8526] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 259.230552][ T8526] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 259.230808][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 259.246815][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 259.272788][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
08:43:40 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56c, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480002002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:40 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd22, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:40 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 259.286468][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 259.293426][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 259.319495][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
08:43:40 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 47)
[ 259.356234][ T8528] loop1: detected capacity change from 0 to 82
[ 259.367013][ T8499] device hsr_slave_0 entered promiscuous mode
[ 259.375530][ T8528] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 259.376037][ T8534] loop2: detected capacity change from 0 to 512
[ 259.386837][ T8530] loop4: detected capacity change from 0 to 94
[ 259.396486][ T8499] device hsr_slave_1 entered promiscuous mode
[ 259.399615][ T8528] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 259.409897][ T8534] FAULT_INJECTION: forcing a failure.
[ 259.409897][ T8534] name failslab, interval 1, probability 0, space 0, times 0
[ 259.416234][ T8530] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 259.424684][ T8534] CPU: 1 PID: 8534 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 259.441779][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 259.451935][ T8534] Call Trace:
[ 259.455200][ T8534]
[ 259.458117][ T8534] dump_stack_lvl+0xd6/0x122
[ 259.462698][ T8534] dump_stack+0x11/0x1b
[ 259.466894][ T8534] should_fail+0x23c/0x250
[ 259.471297][ T8534] ? jbd2__journal_start+0xf7/0x3f0
[ 259.476479][ T8534] __should_failslab+0x81/0x90
[ 259.481245][ T8534] should_failslab+0x5/0x20
[ 259.485736][ T8534] kmem_cache_alloc+0x4f/0x320
[ 259.490485][ T8534] ? find_group_orlov+0x52d/0x840
[ 259.495494][ T8534] jbd2__journal_start+0xf7/0x3f0
[ 259.500506][ T8534] __ext4_journal_start_sb+0x159/0x310
[ 259.506089][ T8534] __ext4_new_inode+0xd95/0x2fc0
[ 259.511066][ T8534] ext4_mkdir+0x28a/0x760
[ 259.515482][ T8534] vfs_mkdir+0x2c8/0x3d0
[ 259.519714][ T8534] do_mkdirat+0x12e/0x2c0
[ 259.524086][ T8534] __x64_sys_mkdir+0x40/0x50
[ 259.528676][ T8534] do_syscall_64+0x44/0xd0
[ 259.533087][ T8534] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 259.539010][ T8534] RIP: 0033:0x7fd1bff4dbf7
[ 259.543407][ T8534] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 259.563013][ T8534] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 259.571828][ T8534] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 259.579783][ T8534] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 259.587839][ T8534] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 259.595807][ T8534] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 259.603758][ T8534] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 259.611719][ T8534]
[ 259.614772][ T8534] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory
[ 259.621956][ T8530] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 259.628803][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 259.647927][ T8499] Cannot create hsr debugfs directory
08:43:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480003002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 259.659884][ T8530] loop4: detected capacity change from 0 to 94
[ 259.669057][ T8528] loop1: detected capacity change from 0 to 82
[ 259.677643][ T8530] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 259.690352][ T8528] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 259.703228][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 259.711781][ T8528] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 259.722241][ T8530] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 259.734398][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 259.744059][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 259.763309][ T8536] device bridge_slave_0 left promiscuous mode
[ 259.770111][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 259.801643][ T8536] device bridge_slave_1 left promiscuous mode
[ 259.808470][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 259.830265][ T8536] bond0: (slave bond_slave_0): Releasing backup interface
[ 259.879659][ T8536] bond0: (slave bond_slave_1): Releasing backup interface
[ 259.958066][ T8536] team0: Port device team_slave_0 removed
[ 260.008345][ T8536] team0: Port device team_slave_1 removed
[ 260.018687][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 260.026564][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 260.040583][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 260.048518][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 260.178238][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[ 260.189127][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 260.197015][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 260.206693][ T8499] 8021q: adding VLAN 0 to HW filter on device team0
[ 260.216786][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 260.225458][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 260.233789][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 260.240971][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 260.259329][ T8499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 260.269747][ T8499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 260.281747][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 260.289848][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 260.299089][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 260.307622][ T19] bridge0: port 2(bridge_slave_1) entered blocking state
[ 260.314717][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 260.322775][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 260.331790][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 260.340880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 260.349364][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 260.358383][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 260.366792][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 260.375560][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 260.383952][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 260.393081][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 260.401538][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 260.416548][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 260.425544][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 260.433811][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 260.441596][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 260.449092][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 260.508151][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 260.516985][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 260.575562][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 260.584281][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 260.593635][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 260.602644][ T8499] device veth0_vlan entered promiscuous mode
[ 260.613729][ T8499] device veth1_vlan entered promiscuous mode
[ 260.629698][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 260.637980][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 260.647947][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 260.657563][ T8499] device veth0_macvtap entered promiscuous mode
[ 260.666942][ T8499] device veth1_macvtap entered promiscuous mode
[ 260.678269][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 260.688721][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.698618][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 260.709039][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.718866][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 260.729277][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.739095][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 260.749514][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.761732][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 260.772673][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 260.781383][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 260.790141][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 260.799348][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 260.809828][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.819708][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 260.830124][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.840004][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 260.850623][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.860443][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 260.870962][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 260.883851][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 260.891691][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 260.900488][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 260.964123][ T8557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 260.984103][ T8557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 260.993275][ T8557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 261.011747][ T8557] device bridge_slave_0 left promiscuous mode
[ 261.018493][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state
[ 261.033378][ T8557] device bridge_slave_1 left promiscuous mode
[ 261.040449][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state
[ 261.059369][ T8557] bond0: (slave bond_slave_0): Releasing backup interface
[ 261.094858][ T8557] bond0: (slave bond_slave_1): Releasing backup interface
[ 261.170461][ T8557] team0: Port device team_slave_0 removed
[ 261.223521][ T8557] team0: Port device team_slave_1 removed
[ 261.234189][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 261.242100][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 261.256822][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 261.264622][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1
08:43:42 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480004002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:42 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:42 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd23, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:42 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 48)
08:43:42 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 261.345897][ T8560] loop1: detected capacity change from 0 to 82
[ 261.352719][ T8563] loop4: detected capacity change from 0 to 94
[ 261.364814][ T8568] loop2: detected capacity change from 0 to 512
[ 261.365994][ T8563] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 261.371490][ T8568] FAULT_INJECTION: forcing a failure.
[ 261.371490][ T8568] name failslab, interval 1, probability 0, space 0, times 0
[ 261.381476][ T8563] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 261.392202][ T8568] CPU: 1 PID: 8568 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 261.392227][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 261.392237][ T8568] Call Trace:
[ 261.392244][ T8568]
[ 261.426451][ T8568] dump_stack_lvl+0xd6/0x122
[ 261.431122][ T8568] dump_stack+0x11/0x1b
[ 261.435274][ T8568] should_fail+0x23c/0x250
[ 261.439757][ T8568] ? sidtab_sid2str_get+0xb0/0x140
[ 261.444971][ T8568] __should_failslab+0x81/0x90
[ 261.449730][ T8568] should_failslab+0x5/0x20
[ 261.454231][ T8568] __kmalloc_track_caller+0x6d/0x370
[ 261.459664][ T8568] kmemdup+0x21/0x50
[ 261.463559][ T8568] sidtab_sid2str_get+0xb0/0x140
[ 261.468499][ T8568] security_sid_to_context_core+0x1d0/0x2d0
[ 261.474439][ T8568] security_sid_to_context_force+0x2f/0x40
[ 261.480257][ T8568] selinux_inode_init_security+0x4e4/0x590
[ 261.486087][ T8568] security_inode_init_security+0xe4/0x260
[ 261.492240][ T8568] ? ext4_init_security+0x40/0x40
[ 261.497269][ T8568] ext4_init_security+0x30/0x40
[ 261.502232][ T8568] __ext4_new_inode+0x29a3/0x2fc0
[ 261.507313][ T8568] ext4_mkdir+0x28a/0x760
[ 261.511679][ T8568] vfs_mkdir+0x2c8/0x3d0
[ 261.515956][ T8568] do_mkdirat+0x12e/0x2c0
[ 261.520297][ T8568] __x64_sys_mkdir+0x40/0x50
[ 261.524890][ T8568] do_syscall_64+0x44/0xd0
[ 261.529410][ T8568] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 261.535306][ T8568] RIP: 0033:0x7fd1bff4dbf7
[ 261.539787][ T8568] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 261.557747][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 261.559387][ T8568] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 261.559411][ T8568] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 261.559429][ T8568] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
08:43:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480005002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 261.559442][ T8568] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 261.559454][ T8568] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 261.559467][ T8568] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 261.559484][ T8568]
[ 261.620945][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 261.633803][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
08:43:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480006002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:43 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 49)
[ 261.642390][ T8560] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 261.662429][ T8563] loop4: detected capacity change from 0 to 94
[ 261.674745][ T8560] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 261.677219][ T8563] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 261.729471][ T8563] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 261.729762][ T8578] loop2: detected capacity change from 0 to 512
[ 261.747006][ T8560] loop1: detected capacity change from 0 to 82
[ 261.770923][ T8560] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 261.785007][ T8578] FAULT_INJECTION: forcing a failure.
[ 261.785007][ T8578] name failslab, interval 1, probability 0, space 0, times 0
[ 261.797751][ T8578] CPU: 0 PID: 8578 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 261.806433][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 261.816492][ T8578] Call Trace:
[ 261.819771][ T8578]
[ 261.822693][ T8578] dump_stack_lvl+0xd6/0x122
[ 261.827288][ T8578] dump_stack+0x11/0x1b
[ 261.831436][ T8578] should_fail+0x23c/0x250
[ 261.835925][ T8578] ? kcalloc+0x32/0x50
[ 261.837240][ T8560] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 261.840028][ T8578] __should_failslab+0x81/0x90
[ 261.854168][ T8578] should_failslab+0x5/0x20
[ 261.858690][ T8578] __kmalloc+0x6f/0x370
[ 261.863002][ T8578] ? chksum_update+0x39/0x50
[ 261.867624][ T8578] kcalloc+0x32/0x50
[ 261.871579][ T8578] ext4_find_extent+0x19f/0x7e0
[ 261.876588][ T8578] ? __getblk_gfp+0x3f/0x530
[ 261.881256][ T8578] ext4_ext_map_blocks+0x115/0x2120
[ 261.886495][ T8578] ? jbd2_journal_dirty_metadata+0x218/0x690
[ 261.892484][ T8578] ? ext4_es_lookup_extent+0x221/0x500
[ 261.898018][ T8578] ext4_map_blocks+0x1cf/0xf00
[ 261.902822][ T8578] ? __ext4_mark_inode_dirty+0x502/0x5f0
[ 261.908450][ T8578] ext4_getblk+0xc6/0x3e0
[ 261.912775][ T8578] ext4_bread+0x28/0x100
[ 261.917042][ T8578] ext4_append+0xd1/0x1c0
[ 261.921433][ T8578] ext4_init_new_dir+0x177/0x500
[ 261.926425][ T8578] ext4_mkdir+0x329/0x760
[ 261.930784][ T8578] vfs_mkdir+0x2c8/0x3d0
[ 261.935043][ T8578] do_mkdirat+0x12e/0x2c0
[ 261.939473][ T8578] __x64_sys_mkdir+0x40/0x50
[ 261.944114][ T8578] do_syscall_64+0x44/0xd0
[ 261.948531][ T8578] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 261.954470][ T8578] RIP: 0033:0x7fd1bff4dbf7
[ 261.958876][ T8578] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 261.978595][ T8578] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 261.986997][ T8578] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 261.994960][ T8578] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 262.002921][ T8578] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 262.010879][ T8578] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
08:43:43 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\a\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\b\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 262.018892][ T8578] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 262.026859][ T8578]
[ 262.059232][ T8578] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 262.105044][ T8578] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 262.203798][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 262.234432][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 262.246669][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
08:43:43 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:43 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd24, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:43 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\t\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:43 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 50)
[ 262.361895][ T8592] loop2: detected capacity change from 0 to 512
[ 262.370574][ T8599] loop4: detected capacity change from 0 to 94
[ 262.383142][ T8595] loop1: detected capacity change from 0 to 82
08:43:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\n\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:44 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 262.405743][ T8599] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 262.416426][ T8592] FAULT_INJECTION: forcing a failure.
[ 262.416426][ T8592] name failslab, interval 1, probability 0, space 0, times 0
[ 262.429694][ T8592] CPU: 0 PID: 8592 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 262.438385][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 262.448650][ T8592] Call Trace:
[ 262.451252][ T8595] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 262.451926][ T8592]
[ 262.462983][ T8592] dump_stack_lvl+0xd6/0x122
[ 262.467575][ T8592] dump_stack+0x11/0x1b
[ 262.471724][ T8592] should_fail+0x23c/0x250
[ 262.476125][ T8592] ? kcalloc+0x32/0x50
[ 262.480182][ T8592] __should_failslab+0x81/0x90
[ 262.484934][ T8592] should_failslab+0x5/0x20
[ 262.489526][ T8592] __kmalloc+0x6f/0x370
[ 262.493669][ T8592] ? chksum_update+0x39/0x50
[ 262.498243][ T8592] kcalloc+0x32/0x50
[ 262.502126][ T8592] ext4_find_extent+0x19f/0x7e0
[ 262.507032][ T8592] ? __getblk_gfp+0x3f/0x530
[ 262.511608][ T8592] ext4_ext_map_blocks+0x115/0x2120
[ 262.516814][ T8592] ? jbd2_journal_dirty_metadata+0x218/0x690
[ 262.522823][ T8592] ? ext4_es_lookup_extent+0x221/0x500
[ 262.528263][ T8592] ext4_map_blocks+0x1cf/0xf00
[ 262.533088][ T8592] ? __ext4_mark_inode_dirty+0x502/0x5f0
[ 262.538724][ T8592] ext4_getblk+0xc6/0x3e0
[ 262.543040][ T8592] ext4_bread+0x28/0x100
[ 262.547332][ T8592] ext4_append+0xd1/0x1c0
[ 262.551647][ T8592] ext4_init_new_dir+0x177/0x500
[ 262.556568][ T8592] ext4_mkdir+0x329/0x760
[ 262.560880][ T8592] vfs_mkdir+0x2c8/0x3d0
[ 262.565108][ T8592] do_mkdirat+0x12e/0x2c0
[ 262.569472][ T8592] __x64_sys_mkdir+0x40/0x50
[ 262.574091][ T8592] do_syscall_64+0x44/0xd0
[ 262.578493][ T8592] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 262.584508][ T8592] RIP: 0033:0x7fd1bff4dbf7
[ 262.588920][ T8592] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 262.608506][ T8592] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 262.616993][ T8592] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 262.625036][ T8592] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 262.632996][ T8592] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 262.640952][ T8592] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 262.648906][ T8592] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 262.656954][ T8592]
[ 262.665808][ T8599] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 262.696981][ T8592] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:43:44 executing program 3:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\v\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 262.721988][ T8592] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 262.734417][ T8599] loop4: detected capacity change from 0 to 94
[ 262.745239][ T8595] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 262.754613][ T8599] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 262.778378][ T8599] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
08:43:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\f\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 262.830791][ T8595] loop1: detected capacity change from 0 to 82
[ 262.866475][ T8595] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:43:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000f002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 262.898046][ T8595] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:43:44 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd25, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:44 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 51)
08:43:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480010002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:44 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:44 executing program 3:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 263.002488][ T8615] loop4: detected capacity change from 0 to 94
[ 263.031513][ T8618] loop2: detected capacity change from 0 to 512
[ 263.046256][ T8615] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 263.067658][ T8618] FAULT_INJECTION: forcing a failure.
[ 263.067658][ T8618] name failslab, interval 1, probability 0, space 0, times 0
[ 263.080703][ T8618] CPU: 1 PID: 8618 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 263.089388][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 263.099478][ T8618] Call Trace:
[ 263.102756][ T8618]
[ 263.105766][ T8618] dump_stack_lvl+0xd6/0x122
[ 263.106022][ T8615] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 263.110369][ T8618] dump_stack+0x11/0x1b
[ 263.123796][ T8618] should_fail+0x23c/0x250
[ 263.128217][ T8618] ? kcalloc+0x32/0x50
[ 263.132295][ T8618] __should_failslab+0x81/0x90
[ 263.135458][ T8622] loop1: detected capacity change from 0 to 82
[ 263.137098][ T8618] should_failslab+0x5/0x20
[ 263.147754][ T8618] __kmalloc+0x6f/0x370
[ 263.151917][ T8618] kcalloc+0x32/0x50
[ 263.155913][ T8618] ext4_find_extent+0x19f/0x7e0
[ 263.160842][ T8618] ? kfree+0xf8/0x1f0
[ 263.164369][ T8622] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 263.164849][ T8618] ext4_ext_map_blocks+0x115/0x2120
[ 263.164878][ T8618] ? jbd2_journal_dirty_metadata+0x218/0x690
[ 263.164903][ T8618] ext4_map_blocks+0x71e/0xf00
[ 263.188894][ T8618] ? __ext4_mark_inode_dirty+0x502/0x5f0
[ 263.194573][ T8618] ext4_getblk+0xc6/0x3e0
[ 263.198980][ T8618] ext4_bread+0x28/0x100
[ 263.203207][ T8618] ext4_append+0xd1/0x1c0
[ 263.207517][ T8618] ext4_init_new_dir+0x177/0x500
[ 263.212439][ T8618] ext4_mkdir+0x329/0x760
[ 263.216756][ T8618] vfs_mkdir+0x2c8/0x3d0
[ 263.220988][ T8618] do_mkdirat+0x12e/0x2c0
[ 263.225315][ T8618] __x64_sys_mkdir+0x40/0x50
[ 263.229887][ T8618] do_syscall_64+0x44/0xd0
[ 263.234290][ T8618] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 263.240352][ T8618] RIP: 0033:0x7fd1bff4dbf7
[ 263.244759][ T8618] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 263.264378][ T8618] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 263.272775][ T8618] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 263.280730][ T8618] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 263.288684][ T8618] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
08:43:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480011002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:44 executing program 3:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa56d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 263.296637][ T8618] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 263.304615][ T8618] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 263.312648][ T8618]
[ 263.375921][ T8622] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 263.389915][ T8615] loop4: detected capacity change from 0 to 94
[ 263.400396][ T8615] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 263.409161][ T8615] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 263.461678][ T8622] loop1: detected capacity change from 0 to 82
[ 263.512429][ T8622] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 263.542676][ T8622] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 263.566512][ T8] device hsr_slave_0 left promiscuous mode
[ 263.574742][ T8] device hsr_slave_1 left promiscuous mode
[ 263.604866][ T8] device veth1_macvtap left promiscuous mode
[ 263.611046][ T8] device veth0_macvtap left promiscuous mode
[ 263.617130][ T8] device veth1_vlan left promiscuous mode
[ 263.622852][ T8] device veth0_vlan left promiscuous mode
[ 263.915155][ T8] bond0 (unregistering): Released all slaves
[ 265.036554][ T8629] chnl_net:caif_netlink_parms(): no params data found
[ 265.072464][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state
[ 265.079621][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state
[ 265.090619][ T8629] device bridge_slave_0 entered promiscuous mode
[ 265.101799][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state
[ 265.109183][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state
[ 265.118722][ T8629] device bridge_slave_1 entered promiscuous mode
[ 265.136219][ T8629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 265.151736][ T8629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 265.171000][ T8629] team0: Port device team_slave_0 added
[ 265.177453][ T8629] team0: Port device team_slave_1 added
[ 265.198059][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 265.205216][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 265.231277][ T8629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 265.244003][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 265.251049][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 265.277173][ T8629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 265.289591][ T8] device hsr_slave_0 left promiscuous mode
[ 265.296137][ T8] device hsr_slave_1 left promiscuous mode
[ 265.307662][ T8] device veth1_macvtap left promiscuous mode
[ 265.313672][ T8] device veth0_macvtap left promiscuous mode
[ 265.319691][ T8] device veth1_vlan left promiscuous mode
[ 265.325564][ T8] device veth0_vlan left promiscuous mode
[ 265.549575][ T8] bond0 (unregistering): Released all slaves
[ 265.616431][ T8629] device hsr_slave_0 entered promiscuous mode
[ 265.624585][ T8629] device hsr_slave_1 entered promiscuous mode
[ 265.771974][ T8629] 8021q: adding VLAN 0 to HW filter on device bond0
[ 265.782629][ T8643] chnl_net:caif_netlink_parms(): no params data found
[ 265.800501][ T8629] 8021q: adding VLAN 0 to HW filter on device team0
[ 265.808115][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 265.815874][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 265.850119][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 265.858748][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 265.867220][ T2007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 265.874410][ T2007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 265.882340][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 265.890897][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 265.899107][ T2007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 265.906149][ T2007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 265.913994][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 265.922779][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 265.931374][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 265.939810][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 265.948325][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 265.956712][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 265.965201][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 265.973558][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 265.981765][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 265.993837][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 266.001771][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 266.015547][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 266.052226][ T8629] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 266.060395][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 266.068895][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 266.112551][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 266.119643][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 266.127499][ T8643] device bridge_slave_0 entered promiscuous mode
[ 266.135004][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 266.142136][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 266.150181][ T8643] device bridge_slave_1 entered promiscuous mode
[ 266.175290][ T8643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 266.186420][ T8643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 266.206759][ T8643] team0: Port device team_slave_0 added
[ 266.213164][ T8643] team0: Port device team_slave_1 added
[ 266.228669][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 266.235654][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 266.261720][ T8643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 266.273136][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 266.280218][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 266.306176][ T8643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 266.329393][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 266.355309][ T8643] device hsr_slave_0 entered promiscuous mode
[ 266.365043][ T8643] device hsr_slave_1 entered promiscuous mode
[ 266.375146][ T8643] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 266.382714][ T8643] Cannot create hsr debugfs directory
[ 266.439144][ T8629] device veth0_vlan entered promiscuous mode
[ 266.448040][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 266.456756][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 266.464537][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 266.487246][ T8629] device veth1_vlan entered promiscuous mode
[ 266.495786][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 266.503808][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 266.519878][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 266.540076][ T8629] device veth0_macvtap entered promiscuous mode
[ 266.553493][ T8629] device veth1_macvtap entered promiscuous mode
[ 266.566272][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 266.578680][ T8643] 8021q: adding VLAN 0 to HW filter on device team0
[ 266.587171][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 266.596323][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 266.610639][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 266.621116][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.630989][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 266.641403][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.651270][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 266.661680][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.671492][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 266.681912][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.694257][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 266.702688][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 266.711565][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 266.725859][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 266.736353][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.746174][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 266.756593][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.766483][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 266.776921][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.786830][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 266.797660][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 266.809523][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 266.816956][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 266.827729][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 266.836997][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 266.844020][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 266.851850][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 266.861594][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 266.870297][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 266.877388][ T1914] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 266.886671][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 266.895456][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 266.904233][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 266.913956][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 266.927817][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 266.935750][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 266.944266][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 266.954189][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 266.962784][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 266.977539][ T8643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 266.987920][ T8643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 267.010774][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 267.020047][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 267.028617][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 267.037917][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 267.046873][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 267.060125][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 267.070370][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 267.079265][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 267.093742][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 267.168899][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 267.191806][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 267.201863][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 267.223823][ T8677] device bridge_slave_0 left promiscuous mode
[ 267.230744][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 267.247705][ T8677] device bridge_slave_1 left promiscuous mode
[ 267.254533][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 267.273559][ T8677] bond0: (slave bond_slave_0): Releasing backup interface
[ 267.312199][ T8677] bond0: (slave bond_slave_1): Releasing backup interface
[ 267.398165][ T8677] team0: Port device team_slave_0 removed
[ 267.446284][ T8677] team0: Port device team_slave_1 removed
[ 267.456884][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 267.464644][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 267.479146][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 267.487105][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1
08:43:49 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480014002800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:49 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd26, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:49 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 52)
08:43:49 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa570, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 267.574416][ T8682] loop4: detected capacity change from 0 to 94
[ 267.582897][ T8686] loop1: detected capacity change from 0 to 82
[ 267.597894][ T8689] loop2: detected capacity change from 0 to 512
[ 267.604431][ T8689] FAULT_INJECTION: forcing a failure.
[ 267.604431][ T8689] name failslab, interval 1, probability 0, space 0, times 0
[ 267.617139][ T8689] CPU: 0 PID: 8689 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 267.625848][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 267.635911][ T8689] Call Trace:
[ 267.639181][ T8689]
[ 267.642133][ T8689] dump_stack_lvl+0xd6/0x122
[ 267.646721][ T8689] dump_stack+0x11/0x1b
[ 267.650970][ T8689] should_fail+0x23c/0x250
[ 267.655385][ T8689] ? ext4_mb_new_blocks+0x328/0x1ee0
[ 267.660675][ T8689] __should_failslab+0x81/0x90
[ 267.665530][ T8689] should_failslab+0x5/0x20
[ 267.670030][ T8689] kmem_cache_alloc+0x4f/0x320
[ 267.674795][ T8689] ext4_mb_new_blocks+0x328/0x1ee0
[ 267.680005][ T8689] ? kcalloc+0x32/0x50
[ 267.684073][ T8689] ? ext4_find_extent+0x6d7/0x7e0
[ 267.689200][ T8689] ? ext4_ext_search_right+0x301/0x4f0
[ 267.694658][ T8689] ? ext4_inode_to_goal_block+0x1bd/0x1d0
[ 267.700477][ T8689] ext4_ext_map_blocks+0x1658/0x2120
[ 267.705769][ T8689] ext4_map_blocks+0x71e/0xf00
[ 267.710530][ T8689] ? __ext4_mark_inode_dirty+0x502/0x5f0
[ 267.716250][ T8689] ext4_getblk+0xc6/0x3e0
[ 267.720580][ T8689] ext4_bread+0x28/0x100
[ 267.724912][ T8689] ext4_append+0xd1/0x1c0
[ 267.729232][ T8689] ext4_init_new_dir+0x177/0x500
[ 267.734170][ T8689] ext4_mkdir+0x329/0x760
[ 267.738750][ T8689] vfs_mkdir+0x2c8/0x3d0
[ 267.743054][ T8689] do_mkdirat+0x12e/0x2c0
[ 267.747376][ T8689] __x64_sys_mkdir+0x40/0x50
[ 267.751980][ T8689] do_syscall_64+0x44/0xd0
[ 267.756460][ T8689] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 267.762423][ T8689] RIP: 0033:0x7fd1bff4dbf7
[ 267.766881][ T8689] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 267.786480][ T8689] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 267.795281][ T8689] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 267.803260][ T8689] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 267.811226][ T8689] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 267.819247][ T8689] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 267.827210][ T8689] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 267.835183][ T8689]
[ 267.842874][ T8686] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 267.843470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 267.859804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
08:43:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00`\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 267.878324][ T8682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 267.878659][ T8686] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:43:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="48001a012800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:49 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 53)
08:43:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000032800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 267.931710][ T8682] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 267.968848][ T8686] loop1: detected capacity change from 0 to 82
[ 267.979966][ T8699] loop2: detected capacity change from 0 to 512
[ 267.988334][ T8686] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 267.989480][ T8699] FAULT_INJECTION: forcing a failure.
[ 267.989480][ T8699] name failslab, interval 1, probability 0, space 0, times 0
[ 268.001153][ T8682] loop4: detected capacity change from 0 to 94
[ 268.009175][ T8699] CPU: 1 PID: 8699 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 268.023956][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 268.034011][ T8699] Call Trace:
[ 268.037284][ T8699]
[ 268.040205][ T8699] dump_stack_lvl+0xd6/0x122
[ 268.044798][ T8699] dump_stack+0x11/0x1b
[ 268.048996][ T8699] should_fail+0x23c/0x250
[ 268.053407][ T8699] ? ext4_mb_new_blocks+0x328/0x1ee0
[ 268.058730][ T8699] __should_failslab+0x81/0x90
[ 268.063493][ T8699] should_failslab+0x5/0x20
[ 268.068003][ T8699] kmem_cache_alloc+0x4f/0x320
[ 268.072832][ T8699] ext4_mb_new_blocks+0x328/0x1ee0
[ 268.078001][ T8699] ? kcalloc+0x32/0x50
[ 268.082068][ T8699] ? ext4_find_extent+0x6d7/0x7e0
[ 268.087096][ T8699] ? ext4_ext_search_right+0x301/0x4f0
[ 268.092583][ T8699] ? ext4_inode_to_goal_block+0x1bd/0x1d0
[ 268.098306][ T8699] ext4_ext_map_blocks+0x1658/0x2120
[ 268.103656][ T8699] ext4_map_blocks+0x71e/0xf00
[ 268.108510][ T8699] ? __ext4_mark_inode_dirty+0x502/0x5f0
[ 268.114210][ T8699] ext4_getblk+0xc6/0x3e0
[ 268.115427][ T8686] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 268.118814][ T8699] ext4_bread+0x28/0x100
[ 268.118839][ T8699] ext4_append+0xd1/0x1c0
[ 268.128221][ T8682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 268.132330][ T8699] ext4_init_new_dir+0x177/0x500
[ 268.140535][ T8682] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 268.144773][ T8699] ext4_mkdir+0x329/0x760
[ 268.144798][ T8699] vfs_mkdir+0x2c8/0x3d0
[ 268.144817][ T8699] do_mkdirat+0x12e/0x2c0
[ 268.144871][ T8699] __x64_sys_mkdir+0x40/0x50
[ 268.176476][ T8699] do_syscall_64+0x44/0xd0
08:43:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000052800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 268.180895][ T8699] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 268.186879][ T8699] RIP: 0033:0x7fd1bff4dbf7
[ 268.191282][ T8699] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 268.210902][ T8699] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 268.219354][ T8699] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
08:43:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000062800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 268.227320][ T8699] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 268.235697][ T8699] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 268.243669][ T8699] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 268.251683][ T8699] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 268.259731][ T8699]
[ 268.390011][ T8643] device veth0_vlan entered promiscuous mode
[ 268.398460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 268.407113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 268.417803][ T8643] device veth1_vlan entered promiscuous mode
[ 268.425153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 268.432834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 268.440873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 268.458351][ T8643] device veth0_macvtap entered promiscuous mode
[ 268.465712][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 268.473732][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 268.482399][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 268.498009][ T8643] device veth1_macvtap entered promiscuous mode
[ 268.506542][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 268.514471][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 268.530344][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 268.540807][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.550691][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 268.561109][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.570955][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 268.581372][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.591369][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 268.601836][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.613234][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 268.630495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 268.639229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 268.651675][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 268.662179][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.672317][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 268.682733][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.692559][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 268.702973][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.712785][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 268.723291][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 268.735740][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 268.743560][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 268.752439][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 268.803571][ T8715] loop3: detected capacity change from 0 to 82
[ 268.812837][ T8715] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 268.822417][ T8715] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (10 blocks)
08:43:50 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:50 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:50 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa571, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:50 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 54)
08:43:50 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\a(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 268.913785][ T8718] loop1: detected capacity change from 0 to 82
[ 268.926342][ T8720] loop2: detected capacity change from 0 to 512
[ 268.933036][ T8722] loop4: detected capacity change from 0 to 94
[ 268.939864][ T8718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 268.971506][ T8718] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 268.984487][ T8722] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 268.993516][ T8720] FAULT_INJECTION: forcing a failure.
[ 268.993516][ T8720] name failslab, interval 1, probability 0, space 0, times 0
[ 269.006154][ T8720] CPU: 1 PID: 8720 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 269.014903][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 269.024955][ T8720] Call Trace:
[ 269.028231][ T8720]
[ 269.031159][ T8720] dump_stack_lvl+0xd6/0x122
[ 269.035788][ T8720] dump_stack+0x11/0x1b
[ 269.039947][ T8720] should_fail+0x23c/0x250
[ 269.044363][ T8720] ? __es_insert_extent+0x546/0xe80
[ 269.049567][ T8720] __should_failslab+0x81/0x90
[ 269.054333][ T8720] should_failslab+0x5/0x20
[ 269.058858][ T8720] kmem_cache_alloc+0x4f/0x320
[ 269.063625][ T8720] __es_insert_extent+0x546/0xe80
[ 269.068866][ T8720] ? ext4_ext_map_blocks+0x1128/0x2120
[ 269.074357][ T8720] ext4_es_insert_extent+0x1cb/0x19c0
[ 269.079754][ T8720] ext4_map_blocks+0xa5d/0xf00
[ 269.084526][ T8720] ext4_getblk+0xc6/0x3e0
[ 269.088876][ T8720] ext4_bread+0x28/0x100
[ 269.093122][ T8720] ext4_append+0xd1/0x1c0
[ 269.097453][ T8720] ext4_init_new_dir+0x177/0x500
[ 269.102461][ T8720] ext4_mkdir+0x329/0x760
[ 269.106793][ T8720] vfs_mkdir+0x2c8/0x3d0
[ 269.111042][ T8720] do_mkdirat+0x12e/0x2c0
[ 269.115433][ T8720] __x64_sys_mkdir+0x40/0x50
[ 269.120033][ T8720] do_syscall_64+0x44/0xd0
[ 269.124448][ T8720] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 269.130409][ T8720] RIP: 0033:0x7fd1bff4dbf7
[ 269.134826][ T8720] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 269.147781][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 269.154534][ T8720] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 269.154559][ T8720] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 269.154572][ T8720] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 269.186750][ T8720] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 269.194908][ T8720] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 269.202885][ T8720] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 269.210868][ T8720]
08:43:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\t(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 269.220936][ T8722] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 269.231045][ T8720] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 269.247101][ T8720] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 269.247888][ T8718] loop1: detected capacity change from 0 to 82
[ 269.288963][ T8722] loop4: detected capacity change from 0 to 94
[ 269.295572][ T8722] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 269.318531][ T8718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 269.346093][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
08:43:50 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 55)
08:43:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\n(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 269.386594][ T8718] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 269.387235][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 269.396134][ T8722] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 269.439961][ T8736] loop2: detected capacity change from 0 to 512
[ 269.472474][ T8736] FAULT_INJECTION: forcing a failure.
[ 269.472474][ T8736] name failslab, interval 1, probability 0, space 0, times 0
08:43:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\v(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:51 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa572, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:51 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd41, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 269.485233][ T8736] CPU: 0 PID: 8736 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 269.494427][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 269.504558][ T8736] Call Trace:
[ 269.507833][ T8736]
[ 269.510779][ T8736] dump_stack_lvl+0xd6/0x122
[ 269.515370][ T8736] dump_stack+0x11/0x1b
[ 269.519544][ T8736] should_fail+0x23c/0x250
[ 269.523949][ T8736] ? jbd2_journal_add_journal_head+0x6c/0x3a0
[ 269.530023][ T8736] __should_failslab+0x81/0x90
[ 269.534803][ T8736] should_failslab+0x5/0x20
[ 269.539359][ T8736] kmem_cache_alloc+0x4f/0x320
[ 269.544132][ T8736] jbd2_journal_add_journal_head+0x6c/0x3a0
[ 269.550081][ T8736] jbd2_journal_get_create_access+0x2c/0x290
[ 269.556123][ T8736] __ext4_journal_get_create_access+0x65/0x320
[ 269.562387][ T8736] ext4_getblk+0x22b/0x3e0
[ 269.567011][ T8736] ext4_bread+0x28/0x100
[ 269.571299][ T8736] ext4_append+0xd1/0x1c0
[ 269.575632][ T8736] ext4_init_new_dir+0x177/0x500
[ 269.580739][ T8736] ext4_mkdir+0x329/0x760
[ 269.585081][ T8736] vfs_mkdir+0x2c8/0x3d0
[ 269.589364][ T8736] do_mkdirat+0x12e/0x2c0
[ 269.593786][ T8736] __x64_sys_mkdir+0x40/0x50
[ 269.598483][ T8736] do_syscall_64+0x44/0xd0
[ 269.602970][ T8736] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 269.608862][ T8736] RIP: 0033:0x7fd1bff4dbf7
[ 269.613363][ T8736] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 269.633008][ T8736] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 269.641478][ T8736] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff4dbf7
[ 269.649465][ T8736] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000
[ 269.657522][ T8736] RBP: 00007fd1bdcc5040 R08: 0000000000000000 R09: ffffffffffffffff
[ 269.665657][ T8736] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200000c0
[ 269.673635][ T8736] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 269.681611][ T8736]
[ 269.684779][ T8736] ENOMEM in journal_alloc_journal_head, retrying.
[ 269.691518][ T8738] loop1: detected capacity change from 0 to 82
[ 269.704262][ T8726] device bridge_slave_0 left promiscuous mode
[ 269.711002][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state
[ 269.726417][ T8726] device bridge_slave_1 left promiscuous mode
[ 269.733718][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state
[ 269.743904][ T8738] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 269.752964][ T8743] loop4: detected capacity change from 0 to 94
[ 269.760340][ T8738] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 269.781350][ T8726] bond0: (slave bond_slave_0): Releasing backup interface
[ 269.792231][ T8743] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 269.813815][ T8743] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 269.847006][ T8738] loop1: detected capacity change from 0 to 82
[ 269.854078][ T8726] bond0: (slave bond_slave_1): Releasing backup interface
[ 269.862828][ T8738] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 269.884910][ T8736] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 269.886478][ T8738] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 269.936237][ T8726] team0: Port device team_slave_0 removed
[ 269.942335][ T8743] loop4: detected capacity change from 0 to 94
[ 269.975636][ T8743] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 269.994264][ T8743] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 270.008982][ T8726] team0: Port device team_slave_1 removed
[ 270.016455][ T8726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 270.023931][ T8726] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 270.032774][ T8726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 270.040273][ T8726] batman_adv: batadv0: Removing interface: batadv_slave_1
08:43:51 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 270.083481][ T8] device hsr_slave_0 left promiscuous mode
[ 270.092017][ T8] device hsr_slave_1 left promiscuous mode
[ 270.115113][ T8] device veth1_macvtap left promiscuous mode
[ 270.121221][ T8] device veth0_macvtap left promiscuous mode
[ 270.127288][ T8] device veth1_vlan left promiscuous mode
[ 270.133031][ T8] device veth0_vlan left promiscuous mode
[ 270.162299][ T8736] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 270.310620][ T8] bond0 (unregistering): Released all slaves
[ 271.378138][ T8] device hsr_slave_0 left promiscuous mode
[ 271.386440][ T8] device hsr_slave_1 left promiscuous mode
[ 271.395659][ T8] device veth1_macvtap left promiscuous mode
[ 271.401779][ T8] device veth0_macvtap left promiscuous mode
[ 271.407906][ T8] device veth1_vlan left promiscuous mode
[ 271.413706][ T8] device veth0_vlan left promiscuous mode
[ 271.542068][ T8] bond0 (unregistering): Released all slaves
[ 271.647464][ T8746] chnl_net:caif_netlink_parms(): no params data found
[ 271.680877][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 271.687994][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 271.695589][ T8746] device bridge_slave_0 entered promiscuous mode
[ 271.702753][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 271.709856][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 271.717541][ T8746] device bridge_slave_1 entered promiscuous mode
[ 271.736002][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 271.746447][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 271.765148][ T8746] team0: Port device team_slave_0 added
[ 271.771523][ T8746] team0: Port device team_slave_1 added
[ 271.787412][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 271.794452][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 271.820485][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 271.831968][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 271.839025][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 271.864990][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 271.889350][ T8746] device hsr_slave_0 entered promiscuous mode
[ 271.895890][ T8746] device hsr_slave_1 entered promiscuous mode
[ 271.996412][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 272.003543][ T8746] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 272.010874][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 272.017952][ T8746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 272.046212][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 272.057422][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 272.066812][ T2007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 272.074627][ T2007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 272.088370][ T8746] 8021q: adding VLAN 0 to HW filter on device team0
[ 272.109068][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 272.117545][ T19] bridge0: port 1(bridge_slave_0) entered blocking state
[ 272.124638][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 272.142643][ T8746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 272.153102][ T8746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 272.167875][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 272.177404][ T2007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 272.184428][ T2007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 272.193706][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 272.203306][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 272.212071][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 272.221044][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 272.234420][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 272.244234][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 272.251939][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 272.260318][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 272.268321][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 272.320493][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 272.379620][ T8746] device veth0_vlan entered promiscuous mode
[ 272.387631][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 272.396377][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 272.404084][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 272.415078][ T8746] device veth1_vlan entered promiscuous mode
[ 272.427034][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 272.435612][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 272.446734][ T8746] device veth0_macvtap entered promiscuous mode
[ 272.454492][ T8746] device veth1_macvtap entered promiscuous mode
[ 272.464419][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 272.476385][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 272.487013][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.496880][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 272.507325][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.517145][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 272.527550][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.537402][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 272.547842][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.560081][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 272.568591][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 272.578030][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 272.586714][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 272.597159][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.606994][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 272.617496][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.627314][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 272.637727][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.647664][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 272.658112][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 272.669590][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 272.678256][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 272.744832][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 272.767198][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 272.776016][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 272.792622][ T8774] device bridge_slave_0 left promiscuous mode
[ 272.799712][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 272.814584][ T8774] device bridge_slave_1 left promiscuous mode
[ 272.821620][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 272.838577][ T8774] bond0: (slave bond_slave_0): Releasing backup interface
[ 272.873987][ T8774] bond0: (slave bond_slave_1): Releasing backup interface
[ 272.947205][ T8774] team0: Port device team_slave_0 removed
[ 272.996664][ T8774] team0: Port device team_slave_1 removed
[ 273.006930][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 273.016961][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 273.030416][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 273.038469][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_1
08:43:54 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa580, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\f(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:54 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd42, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:54 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 56)
08:43:54 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:43:54 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 273.112027][ T8779] loop1: detected capacity change from 0 to 82
[ 273.119027][ T8781] loop2: detected capacity change from 0 to 512
[ 273.137025][ T8783] loop4: detected capacity change from 0 to 94
[ 273.146967][ T8779] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:43:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000f2800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 273.155256][ T8783] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 273.162360][ T8781] FAULT_INJECTION: forcing a failure.
[ 273.162360][ T8781] name failslab, interval 1, probability 0, space 0, times 0
[ 273.176089][ T8781] CPU: 0 PID: 8781 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 273.184802][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 273.194850][ T8781] Call Trace:
[ 273.198122][ T8781]
[ 273.201047][ T8781] dump_stack_lvl+0xd6/0x122
[ 273.205643][ T8781] dump_stack+0x11/0x1b
[ 273.209801][ T8781] should_fail+0x23c/0x250
[ 273.214224][ T8781] ? strndup_user+0x64/0xa0
[ 273.218728][ T8781] __should_failslab+0x81/0x90
[ 273.223497][ T8781] should_failslab+0x5/0x20
[ 273.228073][ T8781] __kmalloc_track_caller+0x6d/0x370
[ 273.233366][ T8781] memdup_user+0x22/0xb0
[ 273.237648][ T8781] strndup_user+0x64/0xa0
[ 273.241983][ T8781] __se_sys_mount+0x4e/0x2f0
[ 273.246605][ T8781] ? debug_smp_processor_id+0x18/0x20
[ 273.251983][ T8781] __x64_sys_mount+0x63/0x70
[ 273.256592][ T8781] do_syscall_64+0x44/0xd0
[ 273.261092][ T8781] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 273.267138][ T8781] RIP: 0033:0x7fd1bff5001a
[ 273.271549][ T8781] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 273.291159][ T8781] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 273.299715][ T8781] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 273.307722][ T8781] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 273.315697][ T8781] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 273.324715][ T8781] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 273.332769][ T8781] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 273.340747][ T8781]
[ 273.348150][ T8783] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 273.357679][ T8779] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:43:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000112800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000142800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800011a2800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:55 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 273.481470][ T8779] loop1: detected capacity change from 0 to 82
[ 273.481749][ T8783] loop4: detected capacity change from 0 to 94
[ 273.510042][ T8779] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 273.511294][ T8783] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:43:55 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 273.547499][ T8779] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 273.574868][ T8783] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
08:43:55 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa5c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480088472800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:55 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd44, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 273.703890][ T8800] loop1: detected capacity change from 0 to 82
[ 273.736425][ T8800] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 273.736850][ T8802] loop4: detected capacity change from 0 to 94
08:43:55 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 57)
08:43:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480088482800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 273.751104][ T8800] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 273.786518][ T8804] loop2: detected capacity change from 0 to 512
[ 273.793275][ T8804] FAULT_INJECTION: forcing a failure.
[ 273.793275][ T8804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 273.806471][ T8804] CPU: 0 PID: 8804 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 273.815195][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 273.825250][ T8804] Call Trace:
[ 273.828524][ T8804]
[ 273.831450][ T8804] dump_stack_lvl+0xd6/0x122
[ 273.836060][ T8804] dump_stack+0x11/0x1b
[ 273.840346][ T8804] should_fail+0x23c/0x250
[ 273.844766][ T8804] should_fail_usercopy+0x16/0x20
[ 273.849809][ T8804] _copy_from_user+0x1c/0xd0
[ 273.854454][ T8804] memdup_user+0x5b/0xb0
[ 273.858701][ T8804] strndup_user+0x64/0xa0
[ 273.863038][ T8804] __se_sys_mount+0x4e/0x2f0
[ 273.867632][ T8804] ? debug_smp_processor_id+0x18/0x20
[ 273.873220][ T8804] __x64_sys_mount+0x63/0x70
[ 273.877818][ T8804] do_syscall_64+0x44/0xd0
[ 273.882309][ T8804] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 273.888248][ T8804] RIP: 0033:0x7fd1bff5001a
[ 273.892663][ T8804] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 273.912380][ T8804] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 273.920795][ T8804] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 273.928767][ T8804] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 273.936740][ T8804] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 273.944715][ T8804] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 273.952748][ T8804] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 273.960842][ T8804]
[ 273.968187][ T8802] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 273.985517][ T8802] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 273.997088][ T8800] loop1: detected capacity change from 0 to 82
[ 274.011729][ T8800] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 274.037999][ T8800] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 274.053227][ T8802] loop4: detected capacity change from 0 to 94
[ 274.065900][ T8802] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 274.094961][ T8802] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 274.196982][ T8] device hsr_slave_0 left promiscuous mode
[ 274.214797][ T8] device hsr_slave_1 left promiscuous mode
[ 274.223226][ T8] device veth1_macvtap left promiscuous mode
[ 274.229359][ T8] device veth0_macvtap left promiscuous mode
[ 274.235475][ T8] device veth1_vlan left promiscuous mode
[ 274.241207][ T8] device veth0_vlan left promiscuous mode
[ 274.495696][ T8] bond0 (unregistering): Released all slaves
[ 275.203762][ T8810] chnl_net:caif_netlink_parms(): no params data found
[ 275.239399][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state
[ 275.246504][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 275.254126][ T8810] device bridge_slave_0 entered promiscuous mode
[ 275.262248][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state
[ 275.269301][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 275.277005][ T8810] device bridge_slave_1 entered promiscuous mode
[ 275.293825][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 275.304962][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 275.323342][ T8810] team0: Port device team_slave_0 added
[ 275.329724][ T8810] team0: Port device team_slave_1 added
[ 275.344524][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 275.351512][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 275.377418][ T8810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 275.388689][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 275.395649][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 275.421541][ T8810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 275.445224][ T8810] device hsr_slave_0 entered promiscuous mode
[ 275.451837][ T8810] device hsr_slave_1 entered promiscuous mode
[ 275.508461][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state
[ 275.515561][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 275.522842][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state
[ 275.529921][ T8810] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 275.558952][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0
[ 275.569580][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 275.579214][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 275.587228][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 275.599844][ T8810] 8021q: adding VLAN 0 to HW filter on device team0
[ 275.610142][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 275.619631][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 275.626663][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 275.647639][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 275.656134][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 275.663202][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 275.673516][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 275.682324][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 275.693227][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 275.702709][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 275.712961][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 275.724286][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 275.746217][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 275.753639][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 275.775699][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 275.905162][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 275.913720][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 275.954492][ T8828] chnl_net:caif_netlink_parms(): no params data found
[ 276.018060][ T8810] device veth0_vlan entered promiscuous mode
[ 276.024957][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 276.033011][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 276.043381][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state
[ 276.050509][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state
[ 276.059904][ T8828] device bridge_slave_0 entered promiscuous mode
[ 276.071551][ T8810] device veth1_vlan entered promiscuous mode
[ 276.078671][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 276.086554][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 276.094200][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 276.102349][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state
[ 276.109469][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state
[ 276.119080][ T8828] device bridge_slave_1 entered promiscuous mode
[ 276.131843][ T8810] device veth0_macvtap entered promiscuous mode
[ 276.140466][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 276.148839][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 276.158595][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 276.172927][ T8810] device veth1_macvtap entered promiscuous mode
[ 276.181407][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 276.189522][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 276.207271][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 276.217735][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.227598][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 276.238010][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.247907][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 276.258390][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.268231][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 276.278639][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.290317][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 276.300066][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 276.309648][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 276.318144][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 276.327217][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 276.337684][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.347540][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 276.357959][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.367773][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 276.378213][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.388026][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 276.398443][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 276.410308][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 276.419152][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 276.428999][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 276.437472][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 276.467739][ T8828] team0: Port device team_slave_0 added
[ 276.474325][ T8828] team0: Port device team_slave_1 added
[ 276.500248][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 276.507241][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 276.533205][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 276.569014][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 276.590043][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 276.599914][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 276.618695][ T8853] device bridge_slave_0 left promiscuous mode
[ 276.625494][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state
[ 276.641124][ T8853] device bridge_slave_1 left promiscuous mode
[ 276.647934][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state
[ 276.667799][ T8853] bond0: (slave bond_slave_0): Releasing backup interface
[ 276.702318][ T8853] bond0: (slave bond_slave_1): Releasing backup interface
[ 276.776380][ T8853] team0: Port device team_slave_0 removed
[ 276.826348][ T8853] team0: Port device team_slave_1 removed
[ 276.836236][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 276.843995][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 276.861576][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 276.869576][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 276.913620][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 276.920667][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 276.946580][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
08:43:58 executing program 3:
pidfd_open(0x0, 0x0)
r0 = socket(0x840000000002, 0x803, 0x101)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2c8, 0x3, 0x3b8, 0x248, 0x204, 0x240, 0x0, 0x0, 0x320, 0x328, 0x328, 0x320, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'xfrm0\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x248, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0xc00000000000000, 0x7, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
r1 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000140)={'vlan0\x00', @ifru_map}})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40448c0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xffc0}, 0x8)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000290000032cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000fdff0700f2ff0100e0ff06000500400100000b00010064736d61726b00000c0002000500040004000000090001007072696f00143c000600050008430000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
08:43:58 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa600, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00eX(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:43:58 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbd56, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:43:58 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 58)
[ 277.011820][ T8857] loop4: detected capacity change from 0 to 94
[ 277.028136][ T8863] loop1: detected capacity change from 0 to 83
[ 277.035231][ T8862] loop2: detected capacity change from 0 to 512
[ 277.041943][ T8863] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 277.045875][ T8857] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:43:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00`(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 277.061520][ T8862] FAULT_INJECTION: forcing a failure.
[ 277.061520][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 277.074674][ T8862] CPU: 0 PID: 8862 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 277.083417][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 277.093471][ T8862] Call Trace:
[ 277.096747][ T8862]
[ 277.099673][ T8862] dump_stack_lvl+0xd6/0x122
[ 277.104311][ T8862] dump_stack+0x11/0x1b
[ 277.108502][ T8862] should_fail+0x23c/0x250
[ 277.112958][ T8862] should_fail_usercopy+0x16/0x20
[ 277.117991][ T8862] _copy_from_user+0x1c/0xd0
[ 277.122636][ T8862] memdup_user+0x5b/0xb0
[ 277.126951][ T8862] strndup_user+0x64/0xa0
[ 277.131281][ T8862] __se_sys_mount+0x4e/0x2f0
[ 277.135913][ T8862] ? debug_smp_processor_id+0x18/0x20
[ 277.141371][ T8862] __x64_sys_mount+0x63/0x70
[ 277.145959][ T8862] do_syscall_64+0x44/0xd0
[ 277.150462][ T8862] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 277.156371][ T8862] RIP: 0033:0x7fd1bff5001a
[ 277.160775][ T8862] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 277.180393][ T8862] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 277.188853][ T8862] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 277.196817][ T8862] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 277.204787][ T8862] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 277.212751][ T8862] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 277.220783][ T8862] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 277.228851][ T8862]
[ 277.245027][ T8863] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 277.255546][ T8857] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 277.273393][ T8828] device hsr_slave_0 entered promiscuous mode
[ 277.280114][ T8828] device hsr_slave_1 entered promiscuous mode
[ 277.287587][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 277.304990][ T8828] Cannot create hsr debugfs directory
[ 277.334275][ T8857] loop4: detected capacity change from 0 to 94
[ 277.347334][ T8863] loop1: detected capacity change from 0 to 83
[ 277.361735][ T8857] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 277.370315][ T8863] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 277.384837][ T8863] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 277.396526][ T8857] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 277.464590][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0
[ 277.475886][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 277.483524][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 277.495846][ T8828] 8021q: adding VLAN 0 to HW filter on device team0
[ 277.505013][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 277.513465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 277.522120][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 277.529420][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 277.538033][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 277.555893][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 277.564469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 277.573070][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 277.580119][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 277.587926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 277.596644][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 277.605462][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 277.613792][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 277.622334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 277.630733][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 277.639260][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 277.647383][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 277.658676][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 277.666572][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 277.684405][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 277.692430][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 277.703140][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 277.759961][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 277.822542][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 277.832231][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 277.840179][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 277.852662][ T8828] device veth0_vlan entered promiscuous mode
[ 277.862346][ T8828] device veth1_vlan entered promiscuous mode
[ 277.876200][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 277.884206][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 277.893839][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 277.904391][ T8] device hsr_slave_0 left promiscuous mode
[ 277.912741][ T8] device hsr_slave_1 left promiscuous mode
[ 277.921736][ T8] device veth1_macvtap left promiscuous mode
[ 277.927877][ T8] device veth0_macvtap left promiscuous mode
[ 277.933900][ T8] device veth1_vlan left promiscuous mode
[ 277.939732][ T8] device veth0_vlan left promiscuous mode
[ 278.057157][ T8] bond0 (unregistering): Released all slaves
[ 278.108938][ T8828] device veth0_macvtap entered promiscuous mode
[ 278.118978][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 278.130050][ T8828] device veth1_macvtap entered promiscuous mode
[ 278.143474][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 278.153940][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.163985][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 278.174432][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.184242][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 278.194677][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.204488][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 278.214922][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.226467][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 278.234273][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 278.243198][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 278.252490][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 278.263055][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.272867][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 278.283603][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.293516][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 278.303931][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.313754][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 278.324184][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 278.336616][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 278.344596][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 278.353330][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 278.422144][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 278.444271][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 278.456402][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 278.473426][ T8883] device bridge_slave_0 left promiscuous mode
[ 278.480378][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state
[ 278.495458][ T8883] device bridge_slave_1 left promiscuous mode
[ 278.502176][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state
[ 278.520289][ T8883] bond0: (slave bond_slave_0): Releasing backup interface
[ 278.561827][ T8883] bond0: (slave bond_slave_1): Releasing backup interface
[ 278.629359][ T8883] team0: Port device team_slave_0 removed
[ 278.676765][ T8883] team0: Port device team_slave_1 removed
[ 278.688294][ T8883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 278.696174][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 278.709726][ T8883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 278.717564][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:00 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 59)
08:44:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00Xe(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:00 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
socketpair(0x2c, 0x800, 0x9, &(0x7f0000000000)={0xffffffffffffffff})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x23, 0x0, "2682c5abbc32b6a018402b25a8cf85ac4efaf2505c655277186caf8466bc2fd033ac0933498ed8892b2d9fb519df49fca7e67dee7bf6cf73b97b21db3cfa2afa01df13db04b13ef9183885476deefcbc"}, 0xd8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="0400000000000000000000000a00010072017168cac2c7b1d400020014000000000000000000000001"], 0x48}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x3734, 0x6, 0x400, 0x8d, 0x1a40010, r8})
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private=0xa010102, 0x5, 0x3f, 0x4e24, 0x1f, 0x2, 0x20, 0xa0, 0x87, 0x0, r3}, {0x1, 0x847, 0xeba, 0x8, 0x3, 0x400, 0x3, 0x2}, {0xff, 0x3, 0x3ff, 0x8}, 0xfff, 0x6e6bb0, 0x3, 0x1, 0x3, 0x2}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0x2, @in=@remote, 0x3501, 0x3, 0x2, 0x4, 0x4, 0x6}}, 0xe8)
sendto$inet6(r0, &(0x7f0000000240)="900000001d001f4d154a817393278bff0280a578020000000404840414000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
08:44:00 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:00 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa640, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:00 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbda9, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 278.792385][ T8885] loop2: detected capacity change from 0 to 512
[ 278.808637][ T8888] loop4: detected capacity change from 0 to 94
[ 278.816688][ T8891] loop1: detected capacity change from 0 to 83
[ 278.828104][ T8885] FAULT_INJECTION: forcing a failure.
[ 278.828104][ T8885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 278.841270][ T8885] CPU: 0 PID: 8885 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 278.849959][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 278.860059][ T8885] Call Trace:
[ 278.863355][ T8885]
[ 278.866275][ T8885] dump_stack_lvl+0xd6/0x122
[ 278.870869][ T8885] dump_stack+0x11/0x1b
[ 278.875023][ T8885] should_fail+0x23c/0x250
[ 278.879474][ T8885] should_fail_usercopy+0x16/0x20
[ 278.884571][ T8885] _copy_from_user+0x1c/0xd0
[ 278.889168][ T8885] memdup_user+0x5b/0xb0
[ 278.893424][ T8885] strndup_user+0x64/0xa0
[ 278.897822][ T8885] __se_sys_mount+0x91/0x2f0
[ 278.902416][ T8885] ? debug_smp_processor_id+0x18/0x20
[ 278.907813][ T8885] __x64_sys_mount+0x63/0x70
[ 278.912441][ T8885] do_syscall_64+0x44/0xd0
[ 278.916859][ T8885] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 278.922782][ T8885] RIP: 0033:0x7fd1bff5001a
[ 278.927201][ T8885] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 278.946824][ T8885] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 278.955253][ T8885] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 278.963225][ T8885] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 278.971300][ T8885] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 278.979270][ T8885] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 278.987236][ T8885] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 278.995209][ T8885]
[ 279.002285][ T8891] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 279.010625][ T8888] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:44:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000812800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 279.056055][ T8891] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 279.065452][ T8888] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 279.137850][ T8891] loop1: detected capacity change from 0 to 83
[ 279.144895][ T8888] loop4: detected capacity change from 0 to 94
[ 279.153734][ T8888] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 279.162899][ T8891] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:00 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480047882800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 279.181416][ T8888] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 279.196880][ T8891] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480048882800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:00 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200))
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:00 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa680, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 279.335018][ T8903] loop1: detected capacity change from 0 to 83
[ 279.384756][ T8903] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 279.393351][ T8903] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:01 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 60)
08:44:01 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xbe4f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 279.463314][ T8906] loop4: detected capacity change from 0 to 95
[ 279.488120][ T8903] loop1: detected capacity change from 0 to 83
[ 279.491947][ T8906] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 279.515791][ T8903] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 279.524382][ T8906] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 279.546645][ T8908] loop2: detected capacity change from 0 to 512
[ 279.553001][ T8903] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 279.586336][ T8908] FAULT_INJECTION: forcing a failure.
[ 279.586336][ T8908] name failslab, interval 1, probability 0, space 0, times 0
[ 279.599001][ T8908] CPU: 1 PID: 8908 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 279.607681][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 279.617757][ T8908] Call Trace:
[ 279.621037][ T8908]
[ 279.623975][ T8908] dump_stack_lvl+0xd6/0x122
[ 279.629265][ T8908] dump_stack+0x11/0x1b
[ 279.633425][ T8908] should_fail+0x23c/0x250
[ 279.637871][ T8908] ? __se_sys_mount+0xf7/0x2f0
[ 279.642633][ T8908] __should_failslab+0x81/0x90
[ 279.647401][ T8908] should_failslab+0x5/0x20
[ 279.651912][ T8908] kmem_cache_alloc_trace+0x52/0x350
[ 279.657219][ T8908] ? memdup_user+0x96/0xb0
[ 279.661643][ T8908] __se_sys_mount+0xf7/0x2f0
[ 279.666236][ T8908] ? debug_smp_processor_id+0x18/0x20
[ 279.671988][ T8908] __x64_sys_mount+0x63/0x70
[ 279.676580][ T8908] do_syscall_64+0x44/0xd0
[ 279.681004][ T8908] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 279.687007][ T8908] RIP: 0033:0x7fd1bff5001a
[ 279.691428][ T8908] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 279.711087][ T8908] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 279.719565][ T8908] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 279.727540][ T8908] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 279.735511][ T8908] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 279.743523][ T8908] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 279.751587][ T8908] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 279.759566][ T8908]
[ 279.773493][ T8906] loop4: detected capacity change from 0 to 95
[ 279.787263][ T8906] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 279.817015][ T8906] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 280.086689][ T8] device hsr_slave_0 left promiscuous mode
[ 280.097993][ T8] device hsr_slave_1 left promiscuous mode
[ 280.118288][ T8] device veth1_macvtap left promiscuous mode
[ 280.124419][ T8] device veth0_macvtap left promiscuous mode
[ 280.130446][ T8] device veth1_vlan left promiscuous mode
[ 280.136208][ T8] device veth0_vlan left promiscuous mode
[ 280.368693][ T8] bond0 (unregistering): Released all slaves
[ 281.059991][ T8913] chnl_net:caif_netlink_parms(): no params data found
[ 281.096710][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state
[ 281.103899][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state
[ 281.111517][ T8913] device bridge_slave_0 entered promiscuous mode
[ 281.118713][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state
[ 281.125765][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state
[ 281.133427][ T8913] device bridge_slave_1 entered promiscuous mode
[ 281.150124][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 281.160436][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 281.179619][ T8913] team0: Port device team_slave_0 added
[ 281.186069][ T8913] team0: Port device team_slave_1 added
[ 281.202382][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 281.209394][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 281.235373][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 281.246525][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 281.253520][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 281.279447][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 281.301952][ T8913] device hsr_slave_0 entered promiscuous mode
[ 281.310124][ T8913] device hsr_slave_1 entered promiscuous mode
[ 281.365558][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state
[ 281.372728][ T8913] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 281.380073][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state
[ 281.387103][ T8913] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 281.413647][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0
[ 281.436307][ T1917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 281.443999][ T1917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 281.472573][ T8913] 8021q: adding VLAN 0 to HW filter on device team0
[ 281.486073][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 281.493724][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 281.521814][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 281.530430][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 281.539018][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 281.546047][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 281.555268][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 281.563815][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 281.573144][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 281.580325][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 281.589462][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 281.598459][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 281.608614][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 281.617110][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 281.630356][ T8913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 281.640738][ T8913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 281.655618][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 281.663930][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 281.673477][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 281.682207][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 281.690586][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 281.698785][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 281.707130][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 281.720375][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 281.731690][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 281.739547][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 281.754587][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 281.835737][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 281.844272][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 281.855182][ T8928] chnl_net:caif_netlink_parms(): no params data found
[ 281.911569][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 281.918652][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state
[ 281.935378][ T8928] device bridge_slave_0 entered promiscuous mode
[ 281.942913][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state
[ 281.949989][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state
[ 281.958763][ T8928] device bridge_slave_1 entered promiscuous mode
[ 281.981898][ T8913] device veth0_vlan entered promiscuous mode
[ 281.988781][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 281.997026][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 282.007011][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 282.016590][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 282.024280][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 282.034312][ T8913] device veth1_vlan entered promiscuous mode
[ 282.043843][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 282.060908][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 282.069540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 282.079039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 282.087484][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 282.107667][ T8913] device veth0_macvtap entered promiscuous mode
[ 282.117436][ T8928] team0: Port device team_slave_0 added
[ 282.123888][ T8928] team0: Port device team_slave_1 added
[ 282.130795][ T8913] device veth1_macvtap entered promiscuous mode
[ 282.153075][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 282.163605][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.173417][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 282.183873][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.193690][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 282.204101][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.214086][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 282.224500][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.235711][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 282.243186][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 282.250167][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 282.276072][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 282.287059][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 282.296399][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 282.306427][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 282.317714][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 282.327222][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 282.337937][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.347888][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 282.358509][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.368351][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 282.378817][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.388679][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 282.399105][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 282.411434][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 282.418974][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 282.425970][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 282.451857][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 282.470521][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 282.479143][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 282.511929][ T8928] device hsr_slave_0 entered promiscuous mode
[ 282.527513][ T8928] device hsr_slave_1 entered promiscuous mode
[ 282.543158][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 282.551148][ T8928] Cannot create hsr debugfs directory
08:44:04 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa6c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001100270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:04 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc105, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:04 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x909, 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/39, 0x27}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000019000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}, 0x10000)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000002c0)={0x20, 0x17, 0x0, 0x7, 0x31, 0x9, &(0x7f0000000280)="3a61ec7a3135ee72cf8ff918f71d20e434a23eede3aab63a3739206eaabd0068c6d1d338b010ab834d42f6bb73ee1e1b64"})
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x4, 0x8, &(0x7f0000000300)="de8294883c99c846ef134f4f6f5126c665ec5ab79bdb73d83875e9c4d8e1e6f44d6b3b33567684b39997926cce4dbc754ff6cdb4b0064e553735dedd94eec356e8c97e3883b2ab6f79bdffca388fbbf4f540298b4e8082c9a14fd172caa80ed2809a6ff2dae032bb6e4d8de6ac3bd92898a6f04590f30c4c7859ff878efde836769cbd5b1fc7390feb0f5036482f3f2231a1dd8f741ad06298d027234e0335a5"})
r2 = dup(r0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000440)=@urb_type_control={0x2, {0x4}, 0x9, 0x0, &(0x7f00000003c0)={0x1, 0x15, 0xe0, 0x5, 0x9}, 0x8, 0x0, 0x7, 0x0, 0x200, 0x5, &(0x7f0000000400)="c1c298cf15"})
08:44:04 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 61)
[ 282.558172][ T24] audit: type=1400 audit(1638348244.123:776): avc: denied { create } for pid=8954 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 282.611872][ T8960] loop1: detected capacity change from 0 to 83
[ 282.620924][ T8964] loop4: detected capacity change from 0 to 96
[ 282.629010][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 282.629508][ T8966] loop2: detected capacity change from 0 to 512
[ 282.655968][ T8960] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 282.664299][ T8964] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 282.673306][ T8966] FAULT_INJECTION: forcing a failure.
[ 282.673306][ T8966] name failslab, interval 1, probability 0, space 0, times 0
[ 282.685990][ T8966] CPU: 1 PID: 8966 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 282.695021][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 282.705282][ T8966] Call Trace:
[ 282.708593][ T8966]
08:44:04 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xc000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400))
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd27, 0x25dfdbfd, 0x5, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x104, 0x10, 0x1, 0xfffffffc, 0x25dfdbfc, {{@in=@private, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xace, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x21}, [@coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x104}}, 0x0)
08:44:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001200270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 282.711524][ T8966] dump_stack_lvl+0xd6/0x122
[ 282.716121][ T8966] dump_stack+0x11/0x1b
[ 282.720328][ T8966] should_fail+0x23c/0x250
[ 282.724931][ T8966] ? __se_sys_mount+0xf7/0x2f0
[ 282.726699][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0
[ 282.729718][ T8966] __should_failslab+0x81/0x90
[ 282.739243][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 282.741094][ T8966] should_failslab+0x5/0x20
[ 282.741122][ T8966] kmem_cache_alloc_trace+0x52/0x350
[ 282.760229][ T8966] ? memdup_user+0x96/0xb0
[ 282.764657][ T8966] __se_sys_mount+0xf7/0x2f0
[ 282.769250][ T8966] ? debug_smp_processor_id+0x18/0x20
[ 282.774660][ T8966] __x64_sys_mount+0x63/0x70
[ 282.779289][ T8966] do_syscall_64+0x44/0xd0
[ 282.783714][ T8966] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 282.789635][ T8966] RIP: 0033:0x7fd1bff5001a
[ 282.794117][ T8966] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 282.813770][ T8966] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 282.822180][ T8966] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 282.830376][ T8966] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 282.838422][ T8966] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 282.846390][ T8966] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 282.854354][ T8966] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 282.862331][ T8966]
[ 282.866657][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 282.867101][ T8960] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 282.877600][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 282.890884][ T8964] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
08:44:04 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'macvtap0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'wg2\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
dup2(r2, r1)
[ 282.913988][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 282.924934][ T8928] 8021q: adding VLAN 0 to HW filter on device team0
[ 282.936630][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 282.944400][ T8960] loop1: detected capacity change from 0 to 83
[ 282.949323][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 282.960289][ T8964] loop4: detected capacity change from 0 to 96
[ 282.966665][ T8960] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 282.975816][ T24] audit: type=1400 audit(1638348244.533:777): avc: denied { create } for pid=8978 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 282.999883][ T8960] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 283.001423][ T77] bridge0: port 1(bridge_slave_0) entered blocking state
[ 283.009870][ T8964] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 283.016494][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 283.045831][ T24] audit: type=1400 audit(1638348244.563:778): avc: denied { connect } for pid=8978 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 283.047843][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 283.088798][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 283.098105][ T8964] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 283.107804][ T77] bridge0: port 2(bridge_slave_1) entered blocking state
[ 283.114863][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 283.133947][ T8928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 283.144357][ T8928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 283.163596][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 283.172672][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 283.194021][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 283.203258][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 283.212799][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 283.221457][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 283.231393][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 283.240193][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 283.250185][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 283.258732][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 283.267805][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 283.283105][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 283.292050][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 283.301082][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 283.359695][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 283.422766][ T8928] device veth0_vlan entered promiscuous mode
[ 283.431335][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 283.440417][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 283.449760][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 283.460095][ T8928] device veth1_vlan entered promiscuous mode
[ 283.467914][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 283.482878][ T8928] device veth0_macvtap entered promiscuous mode
[ 283.490950][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 283.499772][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 283.509167][ T8928] device veth1_macvtap entered promiscuous mode
[ 283.517488][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 283.525730][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 283.538218][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 283.548657][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.558478][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 283.568980][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.579210][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 283.589742][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.599621][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 283.610038][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.619851][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 283.630400][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.643033][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 283.653412][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 283.662002][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 283.672562][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 283.683064][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.692887][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 283.703367][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.713181][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 283.723647][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.733453][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 283.743888][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.753788][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 283.764298][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 283.776704][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 283.786115][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 283.794944][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 283.836413][ T24] audit: type=1400 audit(1638348245.403:779): avc: denied { open } for pid=8994 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 283.856091][ T24] audit: type=1400 audit(1638348245.403:780): avc: denied { kernel } for pid=8994 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 283.859988][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 283.899131][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 283.908856][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 283.927819][ T8995] device bridge_slave_0 left promiscuous mode
[ 283.934573][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 283.951877][ T8995] device bridge_slave_1 left promiscuous mode
[ 283.958727][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 283.977715][ T8995] bond0: (slave bond_slave_0): Releasing backup interface
[ 284.017306][ T8995] bond0: (slave bond_slave_1): Releasing backup interface
[ 284.100852][ T8995] team0: Port device team_slave_0 removed
[ 284.150485][ T8995] team0: Port device team_slave_1 removed
[ 284.163123][ T8995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 284.171166][ T8995] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 284.187506][ T8995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 284.195316][ T8995] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:05 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200))
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:05 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 62)
08:44:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001300270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:05 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x23, 0x0, "2682c5abbc32b6a018402b25a8cf85ac4efaf2505c655277186caf8466bc2fd033ac0933498ed8892b2d9fb519df49fca7e67dee7bf6cf73b97b21db3cfa2afa01df13db04b13ef9183885476deefcbc"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
accept(r0, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x218, 0xc8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc00, 0x1, 0x1, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x4000000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x1, 0x5, 0x4, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x2, 0x5, 0x0, 0x0, 0x3, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x35, 0x28]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
08:44:05 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa700, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:05 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc106, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 284.275181][ T8997] loop1: detected capacity change from 0 to 83
[ 284.281711][ T8999] loop4: detected capacity change from 0 to 96
[ 284.288626][ T9005] loop2: detected capacity change from 0 to 512
[ 284.296672][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 284.297268][ T9005] FAULT_INJECTION: forcing a failure.
[ 284.297268][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 284.319301][ T9005] CPU: 0 PID: 9005 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 284.327978][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 284.338203][ T9005] Call Trace:
[ 284.341476][ T9005]
[ 284.344453][ T9005] dump_stack_lvl+0xd6/0x122
[ 284.349047][ T9005] dump_stack+0x11/0x1b
[ 284.353285][ T9005] should_fail+0x23c/0x250
[ 284.357699][ T9005] should_fail_usercopy+0x16/0x20
[ 284.362722][ T9005] _copy_from_user+0x1c/0xd0
[ 284.367314][ T9005] __se_sys_mount+0x119/0x2f0
[ 284.371987][ T9005] ? __this_cpu_preempt_check+0x18/0x20
[ 284.377838][ T9005] ? switch_fpu_return+0xc9/0x190
[ 284.382873][ T9005] __x64_sys_mount+0x63/0x70
[ 284.387458][ T9005] do_syscall_64+0x44/0xd0
[ 284.391958][ T9005] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 284.397886][ T9005] RIP: 0033:0x7fd1bff5001a
[ 284.402296][ T9005] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 284.421950][ T9005] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 284.430450][ T9005] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 284.438410][ T9005] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 284.446375][ T9005] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 284.454507][ T9005] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 284.462636][ T9005] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 284.470606][ T9005]
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001400270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001500270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 284.476035][ T9004] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 284.479033][ T8999] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 284.492998][ T8997] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 284.499806][ T9010] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 284.517895][ T9005] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001600270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:06 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 63)
[ 284.554747][ T8999] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 284.577636][ T8997] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 284.593331][ T9005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:06 executing program 3:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x0, @can={0x1d, 0x0}, @generic={0x0, "2033d2f1d7cdd3a292ff7a5ce339"}, @nfc={0x27, 0x1, 0x0, 0x5}, 0x20, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)='macsec0\x00', 0xdd30, 0x4, 0x6})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x160, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1d4, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x784}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf3d5, @private1, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffbff, @remote, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdb, @private2, 0x900}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9e96}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3764}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x55}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xc000}, 0x4008040)
08:44:06 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200))
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 284.650642][ T8999] loop4: detected capacity change from 0 to 96
[ 284.659700][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 284.669877][ T8999] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 284.670171][ T8997] loop1: detected capacity change from 0 to 83
[ 284.707308][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 284.719449][ T8999] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 284.720888][ T9023] loop2: detected capacity change from 0 to 512
[ 284.749303][ T8997] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 284.763375][ T9023] FAULT_INJECTION: forcing a failure.
[ 284.763375][ T9023] name failslab, interval 1, probability 0, space 0, times 0
[ 284.776118][ T9023] CPU: 0 PID: 9023 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 284.784856][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 284.794915][ T9023] Call Trace:
[ 284.795429][ T8997] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 284.798208][ T9023]
[ 284.810425][ T9023] dump_stack_lvl+0xd6/0x122
[ 284.815020][ T9023] dump_stack+0x11/0x1b
[ 284.819174][ T9023] should_fail+0x23c/0x250
[ 284.823576][ T9023] ? getname_flags+0x84/0x3f0
[ 284.828240][ T9023] __should_failslab+0x81/0x90
[ 284.833045][ T9023] should_failslab+0x5/0x20
[ 284.837537][ T9023] kmem_cache_alloc+0x4f/0x320
[ 284.842295][ T9023] getname_flags+0x84/0x3f0
[ 284.846792][ T9023] ? should_fail+0xd6/0x250
[ 284.851319][ T9023] user_path_at_empty+0x28/0x110
[ 284.856274][ T9023] __se_sys_mount+0x217/0x2f0
[ 284.860957][ T9023] __x64_sys_mount+0x63/0x70
[ 284.865535][ T9023] do_syscall_64+0x44/0xd0
[ 284.869943][ T9023] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 284.875830][ T9023] RIP: 0033:0x7fd1bff5001a
[ 284.880277][ T9023] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 284.899938][ T9023] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:06 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, 0x0, 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 284.908354][ T9023] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 284.916387][ T9023] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 284.924346][ T9023] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 284.932318][ T9023] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 284.940337][ T9023] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 284.948298][ T9023]
08:44:06 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 64)
08:44:06 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc121, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:06 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa740, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:06 executing program 3:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x0, @can={0x1d, 0x0}, @generic={0x0, "2033d2f1d7cdd3a292ff7a5ce339"}, @nfc={0x27, 0x1, 0x0, 0x5}, 0x20, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)='macsec0\x00', 0xdd30, 0x4, 0x6})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x160, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1d4, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x784}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf3d5, @private1, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffbff, @remote, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdb, @private2, 0x900}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9e96}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3764}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x55}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xc000}, 0x4008040)
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001900270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 285.047470][ T9031] loop4: detected capacity change from 0 to 96
[ 285.049487][ T9034] loop1: detected capacity change from 0 to 83
[ 285.067284][ T9031] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 285.079901][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 285.084189][ T9034] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 285.108767][ T9031] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 285.120350][ T9034] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 285.130308][ T9033] loop2: detected capacity change from 0 to 512
[ 285.140877][ T9033] FAULT_INJECTION: forcing a failure.
[ 285.140877][ T9033] name failslab, interval 1, probability 0, space 0, times 0
[ 285.153531][ T9033] CPU: 1 PID: 9033 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 285.162295][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 285.172353][ T9033] Call Trace:
[ 285.175630][ T9033]
[ 285.178556][ T9033] dump_stack_lvl+0xd6/0x122
[ 285.183152][ T9033] dump_stack+0x11/0x1b
[ 285.187309][ T9033] should_fail+0x23c/0x250
[ 285.191768][ T9033] ? alloc_fs_context+0x46/0x500
[ 285.196708][ T9033] __should_failslab+0x81/0x90
[ 285.201485][ T9033] should_failslab+0x5/0x20
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001a00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 285.206158][ T9033] kmem_cache_alloc_trace+0x52/0x350
[ 285.211451][ T9033] alloc_fs_context+0x46/0x500
[ 285.216249][ T9033] ? strncmp+0x34/0x70
[ 285.220325][ T9033] fs_context_for_mount+0x1d/0x20
[ 285.225353][ T9033] path_mount+0xdf0/0x1c40
[ 285.229766][ T9033] ? kmem_cache_free+0x65/0x110
[ 285.234638][ T9033] __se_sys_mount+0x24b/0x2f0
[ 285.239353][ T9033] __x64_sys_mount+0x63/0x70
[ 285.244006][ T9033] do_syscall_64+0x44/0xd0
[ 285.248441][ T9033] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 285.254347][ T9033] RIP: 0033:0x7fd1bff5001a
08:44:06 executing program 3:
set_mempolicy(0x3, &(0x7f0000000040)=0xdf3, 0x1c)
r0 = socket$unix(0x1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x80000000}], 0x0, &(0x7f0000000040)={[{@journal_async_commit}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010800000000000000000000b8ee0816756b62187804752330b2b55830d7228eb72f70e5b2e7f90e11cb8be75ae22ec3d63073fe35f3c6ec61a03fc316d5d479"], 0x80}}, 0x0)
r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x6374, 0x0, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
r4 = accept$unix(r0, 0x0, &(0x7f0000000080))
getpeername$unix(r4, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)
[ 285.258776][ T9033] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 285.278380][ T9033] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 285.286908][ T9033] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 285.294898][ T9033] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 285.302957][ T9033] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 285.310930][ T9033] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 285.318946][ T9033] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 285.326922][ T9033]
[ 285.341761][ T9044] loop3: detected capacity change from 0 to 264192
08:44:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001c00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 285.351678][ T9044] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[ 285.379556][ T9031] loop4: detected capacity change from 0 to 96
[ 285.389551][ T9034] loop1: detected capacity change from 0 to 83
[ 285.401929][ T9031] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 285.414517][ T9034] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 285.416124][ T24] audit: type=1400 audit(1638348246.973:781): avc: denied { create } for pid=9042 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 285.442553][ T24] audit: type=1400 audit(1638348246.973:782): avc: denied { connect } for pid=9042 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 285.464450][ T9031] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 285.466988][ T9047] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 285.487410][ T9034] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 285.488411][ T9049] loop3: detected capacity change from 0 to 264192
08:44:07 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc122, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001d00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:07 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa780, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 285.515033][ T9049] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[ 285.596569][ T9055] loop1: detected capacity change from 0 to 83
[ 285.606651][ T9054] loop4: detected capacity change from 0 to 96
[ 285.616580][ T24] audit: type=1400 audit(1638348247.023:783): avc: denied { write } for pid=9042 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 285.636246][ T24] audit: type=1400 audit(1638348247.023:784): avc: denied { accept } for pid=9042 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 285.657864][ T9054] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 285.666157][ T9055] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 285.677241][ T1835] device hsr_slave_0 left promiscuous mode
[ 285.687954][ T9054] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 285.697816][ T1835] device hsr_slave_1 left promiscuous mode
[ 285.706007][ T9055] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 285.721240][ T1835] device veth1_macvtap left promiscuous mode
[ 285.727457][ T1835] device veth0_macvtap left promiscuous mode
[ 285.733511][ T1835] device veth1_vlan left promiscuous mode
[ 285.739253][ T1835] device veth0_vlan left promiscuous mode
[ 285.776724][ T9054] loop4: detected capacity change from 0 to 96
[ 285.793209][ T9054] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 285.804356][ T9055] loop1: detected capacity change from 0 to 83
[ 285.821366][ T9055] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 285.846116][ T9054] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 285.854889][ T9055] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 286.027661][ T1835] bond0 (unregistering): Released all slaves
[ 287.237793][ T9059] chnl_net:caif_netlink_parms(): no params data found
[ 287.272346][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 287.279436][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 287.289399][ T9059] device bridge_slave_0 entered promiscuous mode
[ 287.296823][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 287.303917][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 287.312610][ T9059] device bridge_slave_1 entered promiscuous mode
[ 287.330675][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 287.341140][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 287.362594][ T9059] team0: Port device team_slave_0 added
[ 287.369122][ T9059] team0: Port device team_slave_1 added
[ 287.383943][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 287.390923][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 287.416958][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 287.429905][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 287.436898][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 287.462861][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 287.488996][ T9059] device hsr_slave_0 entered promiscuous mode
[ 287.495576][ T9059] device hsr_slave_1 entered promiscuous mode
[ 287.501842][ T9059] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 287.511502][ T9059] Cannot create hsr debugfs directory
[ 287.549010][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 287.556081][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 287.563438][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 287.570469][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 287.602893][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0
[ 287.613723][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 287.623609][ T19] bridge0: port 1(bridge_slave_0) entered disabled state
[ 287.631738][ T19] bridge0: port 2(bridge_slave_1) entered disabled state
[ 287.642910][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 287.653939][ T9059] 8021q: adding VLAN 0 to HW filter on device team0
[ 287.665213][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 287.673704][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 287.680746][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 287.703947][ T9059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 287.714369][ T9059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 287.728049][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 287.736719][ T19] bridge0: port 2(bridge_slave_1) entered blocking state
[ 287.743738][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 287.752679][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 287.761513][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 287.770354][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 287.778822][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 287.793668][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 287.803207][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 287.810980][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 287.818662][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 287.826727][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 287.878600][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 287.940408][ T9059] device veth0_vlan entered promiscuous mode
[ 287.948574][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 287.957661][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 287.966794][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 287.977231][ T9059] device veth1_vlan entered promiscuous mode
[ 287.987807][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 287.996147][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 288.009388][ T9059] device veth0_macvtap entered promiscuous mode
[ 288.018810][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 288.027604][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 288.038057][ T9059] device veth1_macvtap entered promiscuous mode
[ 288.050102][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 288.060586][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.070593][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 288.081106][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.090932][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 288.101355][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.111313][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 288.121747][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.131567][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 288.141983][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.154556][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 288.162463][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 288.173057][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 288.183744][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.193600][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 288.204036][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.213872][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 288.224434][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.234259][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 288.244839][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.254775][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 288.265224][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 288.277798][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 288.286345][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 288.356467][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 288.378925][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 288.389525][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 288.407066][ T9089] device bridge_slave_0 left promiscuous mode
[ 288.413653][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state
[ 288.431430][ T9089] device bridge_slave_1 left promiscuous mode
[ 288.438388][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state
[ 288.457354][ T9089] bond0: (slave bond_slave_0): Releasing backup interface
[ 288.496701][ T9089] bond0: (slave bond_slave_1): Releasing backup interface
[ 288.576287][ T9089] team0: Port device team_slave_0 removed
[ 288.624613][ T9089] team0: Port device team_slave_1 removed
[ 288.636495][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 288.644273][ T9089] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 288.659713][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 288.667669][ T9089] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:10 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, 0x0, 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001e00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:10 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000280), &(0x7f0000000180), &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd)
add_key$user(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r2, 0x29, 0xea, 0x5, 0x1000006, 0x52, @local, @loopback, 0x8, 0x700, 0x3f, 0xffffffe1}})
bind$packet(r1, &(0x7f0000000600)={0x11, 0x18, r3, 0x1, 0x5, 0x6, @random="91e661687ad3"}, 0x14)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
r6 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000440)={0x2c, @private=0xa010102, 0x4e24, 0x1, 'none\x00', 0x40, 0x10001, 0x2f}, 0x2c)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf25060000004400018014000200767863616e31000000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="ea00011f0000000000000000000001000000009d0100e04123add8dd8c30a5bc5be609c905a30b7718913b7b0cc0c1c9b116913d0bc64e8147be55f9c394b9ad2a2e0d9ff0978c637c595a97005ea8d0c5fde9a35362b4a0b436df762fefa4ded6569249ac525242c3973833c694a28ee2d21742d52708327d416181a523bc7634a9aa8a5208e9d26dc8e474a6067fc128b150994ac3b6d8e6021a54eaa7d06d621597777a06f0275a1f36e1e24f84ef929d556d5e1019cffd0076", @ANYRES32=r2, @ANYBLOB="14000180080003000200000008000100", @ANYRES32, @ANYBLOB="73d9662680afa4ab2fd726905036e610c1151a74588135c05a4866993977f3e9d00a4303f0013b45a20d1c82567da50cb38d72082db2af8a3f81f65b0bfc677a90d8fca808405d8039ebba720706bec64d740b7c5b8718dd253230b89e586dd1faa851b104210cf6771f377d8a2d615dd6a1db092ab3a2f30964dd8abe8bcc6c5b7fd243a9e840fffb60b041f1"], 0x6c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x7d, r2})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40802}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)
08:44:10 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 65)
08:44:10 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa7c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:10 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc123, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 288.751057][ T9092] loop4: detected capacity change from 0 to 96
[ 288.751106][ T9094] loop1: detected capacity change from 0 to 83
[ 288.751880][ T9094] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 288.772468][ T9096] loop2: detected capacity change from 0 to 512
[ 288.780710][ T9098] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20004
[ 288.788009][ T9099] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 288.793444][ T9096] FAULT_INJECTION: forcing a failure.
[ 288.793444][ T9096] name failslab, interval 1, probability 0, space 0, times 0
[ 288.798308][ T9092] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 288.810039][ T9096] CPU: 1 PID: 9096 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 288.827050][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 288.837103][ T9096] Call Trace:
[ 288.840366][ T9096]
[ 288.843283][ T9096] dump_stack_lvl+0xd6/0x122
[ 288.847876][ T9096] dump_stack+0x11/0x1b
[ 288.852049][ T9096] should_fail+0x23c/0x250
[ 288.856536][ T9096] ? alloc_fs_context+0x46/0x500
[ 288.861458][ T9096] __should_failslab+0x81/0x90
[ 288.866225][ T9096] should_failslab+0x5/0x20
[ 288.870719][ T9096] kmem_cache_alloc_trace+0x52/0x350
[ 288.875995][ T9096] alloc_fs_context+0x46/0x500
[ 288.880758][ T9096] ? strncmp+0x34/0x70
[ 288.884830][ T9096] fs_context_for_mount+0x1d/0x20
[ 288.889837][ T9096] path_mount+0xdf0/0x1c40
[ 288.894249][ T9096] ? kmem_cache_free+0x65/0x110
[ 288.899141][ T9096] __se_sys_mount+0x24b/0x2f0
[ 288.903816][ T9096] __x64_sys_mount+0x63/0x70
[ 288.908409][ T9096] do_syscall_64+0x44/0xd0
[ 288.912817][ T9096] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 288.918769][ T9096] RIP: 0033:0x7fd1bff5001a
[ 288.923168][ T9096] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 288.942792][ T9096] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 288.951187][ T9096] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 288.959194][ T9096] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 288.967150][ T9096] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 288.975106][ T9096] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 288.983061][ T9096] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 288.991337][ T9096]
08:44:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00 \x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 289.006817][ T9094] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 289.063799][ T9092] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 289.076786][ T9094] loop1: detected capacity change from 0 to 83
[ 289.087671][ T9100] device bond0 entered promiscuous mode
[ 289.093249][ T9100] device bond_slave_0 entered promiscuous mode
[ 289.099594][ T9100] device bond_slave_1 entered promiscuous mode
[ 289.113901][ T9100] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 289.120972][ T9094] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 289.129905][ T9094] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 289.133267][ T9092] loop4: detected capacity change from 0 to 96
[ 289.150641][ T9100] device bond0 left promiscuous mode
[ 289.155539][ T9092] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:44:10 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 66)
[ 289.156000][ T9100] device bond_slave_0 left promiscuous mode
[ 289.164930][ T9092] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 289.170169][ T9100] device bond_slave_1 left promiscuous mode
[ 289.197694][ T9105] loop2: detected capacity change from 0 to 512
[ 289.204583][ T9105] FAULT_INJECTION: forcing a failure.
[ 289.204583][ T9105] name failslab, interval 1, probability 0, space 0, times 0
[ 289.217248][ T9105] CPU: 0 PID: 9105 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 289.225934][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 289.236099][ T9105] Call Trace:
[ 289.239373][ T9105]
[ 289.242353][ T9105] dump_stack_lvl+0xd6/0x122
[ 289.247016][ T9105] dump_stack+0x11/0x1b
[ 289.251247][ T9105] should_fail+0x23c/0x250
[ 289.255672][ T9105] ? vfs_parse_fs_string+0x6d/0xd0
[ 289.260915][ T9105] __should_failslab+0x81/0x90
[ 289.265676][ T9105] should_failslab+0x5/0x20
[ 289.270177][ T9105] __kmalloc_track_caller+0x6d/0x370
[ 289.275472][ T9105] kmemdup_nul+0x27/0x70
[ 289.279834][ T9105] vfs_parse_fs_string+0x6d/0xd0
[ 289.284837][ T9105] path_mount+0xf94/0x1c40
[ 289.289252][ T9105] ? kmem_cache_free+0x65/0x110
[ 289.294114][ T9105] __se_sys_mount+0x24b/0x2f0
[ 289.298854][ T9105] __x64_sys_mount+0x63/0x70
[ 289.303473][ T9105] do_syscall_64+0x44/0xd0
[ 289.307890][ T9105] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 289.313796][ T9105] RIP: 0033:0x7fd1bff5001a
[ 289.318203][ T9105] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 289.337863][ T9105] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 289.346359][ T9105] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 289.354436][ T9105] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
08:44:10 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa800, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 289.362472][ T9105] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 289.370493][ T9105] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 289.378473][ T9105] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 289.386495][ T9105]
08:44:11 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc124, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:11 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, 0x0, 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00!\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 289.424247][ T9108] loop1: detected capacity change from 0 to 84
[ 289.460324][ T9100] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20004
08:44:11 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 67)
08:44:11 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 289.479014][ T9108] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 289.482949][ T9114] loop4: detected capacity change from 0 to 96
[ 289.501785][ T9098] device bond0 entered promiscuous mode
[ 289.507432][ T9098] device bond_slave_0 entered promiscuous mode
[ 289.513637][ T9098] device bond_slave_1 entered promiscuous mode
[ 289.528004][ T9114] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 289.532636][ T9108] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 289.545048][ T9116] loop2: detected capacity change from 0 to 512
[ 289.554575][ T9116] FAULT_INJECTION: forcing a failure.
[ 289.554575][ T9116] name failslab, interval 1, probability 0, space 0, times 0
[ 289.567259][ T9116] CPU: 0 PID: 9116 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 289.567800][ T9098] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 289.575934][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 289.575972][ T9116] Call Trace:
[ 289.575978][ T9116]
[ 289.575985][ T9116] dump_stack_lvl+0xd6/0x122
[ 289.576012][ T9116] dump_stack+0x11/0x1b
[ 289.607921][ T9116] should_fail+0x23c/0x250
[ 289.612349][ T9116] ? ext4_mount+0x40/0x40
[ 289.616811][ T9116] ? getname_kernel+0x37/0x1d0
[ 289.621623][ T9116] __should_failslab+0x81/0x90
[ 289.626397][ T9116] should_failslab+0x5/0x20
[ 289.630918][ T9116] kmem_cache_alloc+0x4f/0x320
[ 289.635711][ T9116] ? avc_has_perm_noaudit+0x1c0/0x270
[ 289.641095][ T9116] ? ext4_mount+0x40/0x40
[ 289.645425][ T9116] getname_kernel+0x37/0x1d0
[ 289.650075][ T9116] ? ext4_mount+0x40/0x40
[ 289.654475][ T9116] kern_path+0x1d/0x100
[ 289.658654][ T9116] ? ext4_mount+0x40/0x40
[ 289.663137][ T9116] blkdev_get_by_path+0x63/0x220
[ 289.668115][ T9116] mount_bdev+0x47/0x290
[ 289.672392][ T9116] ? ext4_errno_to_code+0x110/0x110
[ 289.677624][ T9116] ext4_mount+0x2d/0x40
[ 289.681843][ T9116] legacy_get_tree+0x70/0xc0
[ 289.686437][ T9116] vfs_get_tree+0x4a/0x1a0
[ 289.690860][ T9116] path_mount+0x11cf/0x1c40
[ 289.695469][ T9116] ? kmem_cache_free+0x65/0x110
[ 289.695680][ T9114] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 289.700326][ T9116] __se_sys_mount+0x24b/0x2f0
[ 289.714248][ T9116] __x64_sys_mount+0x63/0x70
[ 289.718836][ T9116] do_syscall_64+0x44/0xd0
[ 289.723310][ T9116] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 289.729277][ T9116] RIP: 0033:0x7fd1bff5001a
[ 289.733754][ T9116] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 289.753536][ T9116] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 289.762079][ T9116] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 289.770050][ T9116] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 289.778077][ T9116] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 289.786052][ T9116] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 289.794067][ T9116] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 289.802047][ T9116]
[ 289.805394][ T9098] device bond0 left promiscuous mode
[ 289.810734][ T9098] device bond_slave_0 left promiscuous mode
[ 289.816756][ T9098] device bond_slave_1 left promiscuous mode
[ 289.827675][ T9108] loop1: detected capacity change from 0 to 84
[ 289.829434][ T9114] loop4: detected capacity change from 0 to 96
[ 289.843594][ T9108] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 289.866663][ T9114] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 289.887852][ T9108] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 289.890683][ T9114] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
08:44:11 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, 0x0, 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00\"\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:11 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa814, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:11 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc125, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:11 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 68)
08:44:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 290.041981][ T9123] loop1: detected capacity change from 0 to 84
[ 290.042010][ T9125] loop4: detected capacity change from 0 to 96
[ 290.063316][ T9123] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 290.076935][ T9127] loop2: detected capacity change from 0 to 512
[ 290.083837][ T9127] FAULT_INJECTION: forcing a failure.
[ 290.083837][ T9127] name failslab, interval 1, probability 0, space 0, times 0
[ 290.096568][ T9127] CPU: 1 PID: 9127 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 290.105342][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 290.115681][ T9127] Call Trace:
[ 290.118958][ T9127]
[ 290.121884][ T9127] dump_stack_lvl+0xd6/0x122
[ 290.126699][ T9127] dump_stack+0x11/0x1b
[ 290.130863][ T9127] should_fail+0x23c/0x250
[ 290.135348][ T9127] ? ext4_mount+0x40/0x40
[ 290.139683][ T9127] ? getname_kernel+0x37/0x1d0
[ 290.144540][ T9127] __should_failslab+0x81/0x90
[ 290.149317][ T9127] should_failslab+0x5/0x20
[ 290.153872][ T9127] kmem_cache_alloc+0x4f/0x320
[ 290.158640][ T9127] ? avc_has_perm_noaudit+0x1c0/0x270
[ 290.164058][ T9127] ? ext4_mount+0x40/0x40
[ 290.168451][ T9127] getname_kernel+0x37/0x1d0
[ 290.173053][ T9127] ? ext4_mount+0x40/0x40
[ 290.177570][ T9127] kern_path+0x1d/0x100
[ 290.181727][ T9127] ? ext4_mount+0x40/0x40
[ 290.186113][ T9127] blkdev_get_by_path+0x63/0x220
[ 290.191052][ T9127] mount_bdev+0x47/0x290
[ 290.195452][ T9127] ? ext4_errno_to_code+0x110/0x110
[ 290.200668][ T9127] ext4_mount+0x2d/0x40
[ 290.204993][ T9127] legacy_get_tree+0x70/0xc0
[ 290.209685][ T9127] vfs_get_tree+0x4a/0x1a0
[ 290.214107][ T9127] path_mount+0x11cf/0x1c40
[ 290.218613][ T9127] ? kmem_cache_free+0x65/0x110
[ 290.223490][ T9127] __se_sys_mount+0x24b/0x2f0
[ 290.228240][ T9127] __x64_sys_mount+0x63/0x70
[ 290.232898][ T9127] do_syscall_64+0x44/0xd0
[ 290.237339][ T9127] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 290.243246][ T9127] RIP: 0033:0x7fd1bff5001a
[ 290.247716][ T9127] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 290.268259][ T9127] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 290.276671][ T9127] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 290.284646][ T9127] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 290.293002][ T9127] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 290.300980][ T9127] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 290.308983][ T9127] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 290.316963][ T9127]
[ 290.323438][ T9125] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 290.337829][ T9123] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 290.349069][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 290.372826][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 290.382323][ T9125] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
08:44:11 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 69)
[ 290.392877][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 290.411996][ T9123] loop1: detected capacity change from 0 to 84
[ 290.422411][ T9125] loop4: detected capacity change from 0 to 96
[ 290.436081][ T9125] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 290.445064][ T9119] device bridge_slave_0 left promiscuous mode
[ 290.451761][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state
[ 290.461199][ T9123] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 290.469963][ T9125] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 290.480773][ T9123] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 290.498736][ T9119] device bridge_slave_1 left promiscuous mode
[ 290.505336][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state
[ 290.525922][ T9119] bond0: (slave bond_slave_0): Releasing backup interface
08:44:12 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc126, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:12 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa815, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 290.612484][ T9133] loop4: detected capacity change from 0 to 96
[ 290.612812][ T9119] bond0: (slave bond_slave_1): Releasing backup interface
[ 290.628434][ T9131] loop2: detected capacity change from 0 to 512
[ 290.628667][ T9133] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 290.641120][ T9131] FAULT_INJECTION: forcing a failure.
[ 290.641120][ T9131] name failslab, interval 1, probability 0, space 0, times 0
[ 290.655602][ T9131] CPU: 1 PID: 9131 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 290.664312][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 290.674438][ T9131] Call Trace:
[ 290.677785][ T9131]
[ 290.680715][ T9131] dump_stack_lvl+0xd6/0x122
[ 290.685391][ T9131] dump_stack+0x11/0x1b
[ 290.689551][ T9131] should_fail+0x23c/0x250
[ 290.693965][ T9131] ? kzalloc+0x1d/0x30
[ 290.698037][ T9131] __should_failslab+0x81/0x90
[ 290.702804][ T9131] should_failslab+0x5/0x20
[ 290.707341][ T9131] __kmalloc+0x6f/0x370
[ 290.711495][ T9131] kzalloc+0x1d/0x30
[ 290.715390][ T9131] security_sb_alloc+0x3c/0x180
[ 290.720239][ T9131] alloc_super+0x10b/0x520
[ 290.724650][ T9131] ? mount_bdev+0x290/0x290
[ 290.729155][ T9131] sget+0x189/0x370
[ 290.732997][ T9131] ? test_bdev_super+0x30/0x30
[ 290.737784][ T9131] mount_bdev+0xd3/0x290
[ 290.742025][ T9131] ? ext4_mount+0x40/0x40
[ 290.746378][ T9131] ? ext4_errno_to_code+0x110/0x110
[ 290.751576][ T9131] ext4_mount+0x2d/0x40
[ 290.755726][ T9131] legacy_get_tree+0x70/0xc0
[ 290.760305][ T9131] vfs_get_tree+0x4a/0x1a0
[ 290.764861][ T9131] path_mount+0x11cf/0x1c40
[ 290.769359][ T9131] ? kmem_cache_free+0x65/0x110
[ 290.774213][ T9131] __se_sys_mount+0x24b/0x2f0
[ 290.778919][ T9131] __x64_sys_mount+0x63/0x70
[ 290.783523][ T9131] do_syscall_64+0x44/0xd0
[ 290.788000][ T9131] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 290.793957][ T9131] RIP: 0033:0x7fd1bff5001a
[ 290.798471][ T9131] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 290.818073][ T9131] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 290.826490][ T9131] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 290.834474][ T9131] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 290.842454][ T9131] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 290.850451][ T9131] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 290.858427][ T9131] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 290.866398][ T9131]
[ 290.872067][ T9135] loop1: detected capacity change from 0 to 84
[ 290.878369][ T9133] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 290.893413][ T9135] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:12 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 70)
[ 290.906826][ T9135] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 290.938172][ T9133] loop4: detected capacity change from 0 to 96
[ 290.945941][ T9119] team0: Port device team_slave_0 removed
[ 290.948353][ T9133] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 290.962811][ T9137] loop2: detected capacity change from 0 to 512
[ 290.971681][ T9135] loop1: detected capacity change from 0 to 84
[ 290.978327][ T9137] FAULT_INJECTION: forcing a failure.
[ 290.978327][ T9137] name failslab, interval 1, probability 0, space 0, times 0
[ 290.990970][ T9137] CPU: 0 PID: 9137 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 290.999694][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 291.005774][ T9133] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 291.009746][ T9137] Call Trace:
[ 291.009755][ T9137]
[ 291.009762][ T9137] dump_stack_lvl+0xd6/0x122
[ 291.029783][ T9137] dump_stack+0x11/0x1b
[ 291.034017][ T9137] should_fail+0x23c/0x250
[ 291.038426][ T9137] ? __list_lru_init+0x70/0x6d0
[ 291.043274][ T9137] __should_failslab+0x81/0x90
[ 291.048127][ T9137] should_failslab+0x5/0x20
[ 291.052691][ T9137] __kmalloc+0x6f/0x370
[ 291.056916][ T9137] ? prealloc_memcg_shrinker+0x444/0x460
[ 291.062616][ T9137] __list_lru_init+0x70/0x6d0
[ 291.067309][ T9137] alloc_super+0x490/0x520
[ 291.071724][ T9137] ? mount_bdev+0x290/0x290
[ 291.076225][ T9137] sget+0x189/0x370
[ 291.080313][ T9137] ? test_bdev_super+0x30/0x30
[ 291.085072][ T9137] mount_bdev+0xd3/0x290
[ 291.089306][ T9137] ? ext4_mount+0x40/0x40
[ 291.093633][ T9137] ? ext4_errno_to_code+0x110/0x110
[ 291.098824][ T9137] ext4_mount+0x2d/0x40
[ 291.102976][ T9137] legacy_get_tree+0x70/0xc0
[ 291.107600][ T9137] vfs_get_tree+0x4a/0x1a0
[ 291.112041][ T9137] path_mount+0x11cf/0x1c40
[ 291.116622][ T9137] ? kmem_cache_free+0x65/0x110
[ 291.121518][ T9137] __se_sys_mount+0x24b/0x2f0
[ 291.126203][ T9137] ? __this_cpu_preempt_check+0x18/0x20
[ 291.131833][ T9137] __x64_sys_mount+0x63/0x70
[ 291.136420][ T9137] do_syscall_64+0x44/0xd0
[ 291.140832][ T9137] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 291.146745][ T9137] RIP: 0033:0x7fd1bff5001a
[ 291.151200][ T9137] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 291.170796][ T9137] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 291.179213][ T9137] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 291.187180][ T9137] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 291.195158][ T9137] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 291.203123][ T9137] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 291.211083][ T9137] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 291.219069][ T9137]
[ 291.223969][ T9119] team0: Port device team_slave_1 removed
[ 291.231688][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
08:44:12 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 71)
[ 291.239226][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 291.248485][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 291.255951][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 291.295519][ T9141] loop2: detected capacity change from 0 to 512
[ 291.302618][ T9141] FAULT_INJECTION: forcing a failure.
[ 291.302618][ T9141] name failslab, interval 1, probability 0, space 0, times 0
[ 291.315395][ T9141] CPU: 0 PID: 9141 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 291.324068][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 291.334120][ T9141] Call Trace:
[ 291.337481][ T9141]
[ 291.340404][ T9141] dump_stack_lvl+0xd6/0x122
[ 291.345044][ T9141] dump_stack+0x11/0x1b
[ 291.349200][ T9141] should_fail+0x23c/0x250
[ 291.353616][ T9141] ? __list_lru_init+0x70/0x6d0
[ 291.358466][ T9141] __should_failslab+0x81/0x90
[ 291.363329][ T9141] should_failslab+0x5/0x20
[ 291.367914][ T9141] __kmalloc+0x6f/0x370
[ 291.372081][ T9141] ? prealloc_memcg_shrinker+0x444/0x460
[ 291.377740][ T9141] __list_lru_init+0x70/0x6d0
[ 291.382475][ T9141] alloc_super+0x490/0x520
[ 291.386889][ T9141] ? mount_bdev+0x290/0x290
[ 291.391445][ T9141] sget+0x189/0x370
[ 291.395242][ T9141] ? test_bdev_super+0x30/0x30
[ 291.400045][ T9141] mount_bdev+0xd3/0x290
[ 291.404330][ T9141] ? ext4_mount+0x40/0x40
[ 291.408730][ T9141] ? ext4_errno_to_code+0x110/0x110
[ 291.413943][ T9141] ext4_mount+0x2d/0x40
[ 291.418103][ T9141] legacy_get_tree+0x70/0xc0
[ 291.422692][ T9141] vfs_get_tree+0x4a/0x1a0
[ 291.427155][ T9141] path_mount+0x11cf/0x1c40
[ 291.431669][ T9141] ? kmem_cache_free+0x65/0x110
[ 291.436630][ T9141] __se_sys_mount+0x24b/0x2f0
[ 291.441315][ T9141] __x64_sys_mount+0x63/0x70
[ 291.445905][ T9141] do_syscall_64+0x44/0xd0
[ 291.450333][ T9141] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 291.456264][ T9141] RIP: 0033:0x7fd1bff5001a
[ 291.460708][ T9141] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 291.480310][ T9141] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 291.488721][ T9141] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 291.496704][ T9141] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 291.504776][ T9141] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 291.512737][ T9141] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 291.520766][ T9141] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 291.528735][ T9141]
[ 291.895872][ T9143] chnl_net:caif_netlink_parms(): no params data found
[ 291.938934][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 291.946012][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 291.953586][ T9143] device bridge_slave_0 entered promiscuous mode
[ 291.964087][ T1835] device hsr_slave_0 left promiscuous mode
[ 291.971697][ T1835] device hsr_slave_1 left promiscuous mode
[ 291.979786][ T1835] device veth1_macvtap left promiscuous mode
[ 291.985862][ T1835] device veth0_macvtap left promiscuous mode
[ 291.991937][ T1835] device veth1_vlan left promiscuous mode
[ 291.997682][ T1835] device veth0_vlan left promiscuous mode
[ 292.115497][ T1835] bond0 (unregistering): Released all slaves
[ 292.157175][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 292.164228][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 292.173176][ T9143] device bridge_slave_1 entered promiscuous mode
[ 292.192822][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 292.204415][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 292.223403][ T9143] team0: Port device team_slave_0 added
[ 292.229832][ T9143] team0: Port device team_slave_1 added
[ 292.245540][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 292.252571][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 292.278469][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 292.289681][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 292.296677][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 292.322585][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 292.347010][ T9143] device hsr_slave_0 entered promiscuous mode
[ 292.353644][ T9143] device hsr_slave_1 entered promiscuous mode
[ 292.360106][ T9143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 292.367699][ T9143] Cannot create hsr debugfs directory
[ 292.406799][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 292.413858][ T9143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 292.421207][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 292.428242][ T9143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 292.476823][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0
[ 292.489003][ T9143] 8021q: adding VLAN 0 to HW filter on device team0
[ 292.505994][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 292.514027][ T19] bridge0: port 1(bridge_slave_0) entered disabled state
[ 292.535126][ T19] bridge0: port 2(bridge_slave_1) entered disabled state
[ 292.564726][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 292.573890][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 292.582545][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 292.590171][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 292.599189][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 292.607855][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 292.617307][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 292.624337][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 292.632341][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 292.642329][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 292.651289][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 292.660751][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 292.669352][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 292.678707][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 292.687896][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 292.700237][ T9143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 292.710650][ T9143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 292.723837][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 292.732616][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 292.741163][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 292.749688][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 292.762602][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 292.769983][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 292.778899][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 292.786602][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 292.844364][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 292.853314][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 292.919062][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 292.927548][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 292.937950][ T9143] device veth0_vlan entered promiscuous mode
[ 292.945233][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 292.953162][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 292.970685][ T9143] device veth1_vlan entered promiscuous mode
[ 292.984278][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 292.992827][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 293.001412][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 293.010044][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 293.025013][ T9143] device veth0_macvtap entered promiscuous mode
[ 293.033534][ T9143] device veth1_macvtap entered promiscuous mode
[ 293.045116][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 293.055666][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.065614][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 293.076026][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.085875][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 293.096309][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.106147][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 293.116591][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.129394][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 293.137127][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 293.145346][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 293.153217][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 293.161973][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 293.177311][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 293.187816][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.197631][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 293.208077][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.217903][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 293.228355][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.238305][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 293.248714][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 293.261582][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 293.269778][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 293.278387][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 293.344542][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 293.368418][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 293.378122][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 293.397669][ T9171] device bridge_slave_0 left promiscuous mode
[ 293.404376][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state
[ 293.422561][ T9171] device bridge_slave_1 left promiscuous mode
[ 293.430263][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state
[ 293.449154][ T9171] bond0: (slave bond_slave_0): Releasing backup interface
[ 293.485962][ T9171] bond0: (slave bond_slave_1): Releasing backup interface
[ 293.550569][ T9171] team0: Port device team_slave_0 removed
[ 293.601562][ T9171] team0: Port device team_slave_1 removed
[ 293.612473][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 293.620483][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 293.634419][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 293.642458][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:15 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:15 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa840, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:15 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc141, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:15 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, 0x0, 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:15 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 72)
08:44:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00%\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 293.723542][ T9173] loop1: detected capacity change from 0 to 84
[ 293.732352][ T9177] loop2: detected capacity change from 0 to 512
[ 293.736186][ T9176] loop4: detected capacity change from 0 to 96
[ 293.755603][ T9177] FAULT_INJECTION: forcing a failure.
[ 293.755603][ T9177] name failslab, interval 1, probability 0, space 0, times 0
[ 293.768327][ T9177] CPU: 1 PID: 9177 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 293.770911][ T9176] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 293.777086][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 293.777101][ T9177] Call Trace:
[ 293.777129][ T9177]
[ 293.777137][ T9177] dump_stack_lvl+0xd6/0x122
[ 293.806159][ T9177] dump_stack+0x11/0x1b
[ 293.810300][ T9177] should_fail+0x23c/0x250
[ 293.814836][ T9177] ? __list_lru_init+0x352/0x6d0
[ 293.819753][ T9177] __should_failslab+0x81/0x90
[ 293.824502][ T9177] should_failslab+0x5/0x20
[ 293.828990][ T9177] kmem_cache_alloc_trace+0x52/0x350
[ 293.834292][ T9177] ? __kmalloc_node+0x30/0x40
[ 293.839019][ T9177] __list_lru_init+0x352/0x6d0
[ 293.843777][ T9177] alloc_super+0x490/0x520
[ 293.848176][ T9177] ? mount_bdev+0x290/0x290
[ 293.852660][ T9177] sget+0x189/0x370
[ 293.856460][ T9177] ? test_bdev_super+0x30/0x30
[ 293.861267][ T9177] mount_bdev+0xd3/0x290
[ 293.865532][ T9177] ? ext4_mount+0x40/0x40
[ 293.869847][ T9177] ? ext4_errno_to_code+0x110/0x110
[ 293.875157][ T9177] ext4_mount+0x2d/0x40
[ 293.879373][ T9177] legacy_get_tree+0x70/0xc0
[ 293.883945][ T9177] vfs_get_tree+0x4a/0x1a0
[ 293.888345][ T9177] path_mount+0x11cf/0x1c40
[ 293.892829][ T9177] ? kmem_cache_free+0x65/0x110
[ 293.897702][ T9177] __se_sys_mount+0x24b/0x2f0
[ 293.902364][ T9177] __x64_sys_mount+0x63/0x70
[ 293.907101][ T9177] do_syscall_64+0x44/0xd0
[ 293.911580][ T9177] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 293.917492][ T9177] RIP: 0033:0x7fd1bff5001a
[ 293.922003][ T9177] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 293.941608][ T9177] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 293.950020][ T9177] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 293.958021][ T9177] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 293.965975][ T9177] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 293.973930][ T9177] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 293.981934][ T9177] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 293.989892][ T9177]
[ 294.002147][ T9173] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00&\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 294.039156][ T9173] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 294.074810][ T9176] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
08:44:15 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000022800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 294.126652][ T9173] loop1: detected capacity change from 0 to 84
[ 294.136459][ T9173] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 294.159176][ T9173] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 294.163217][ T9176] loop4: detected capacity change from 0 to 96
08:44:15 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:15 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 73)
08:44:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000032800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 294.236669][ T8] device hsr_slave_0 left promiscuous mode
[ 294.244401][ T8] device hsr_slave_1 left promiscuous mode
[ 294.261145][ T9190] loop2: detected capacity change from 0 to 512
[ 294.273074][ T8] device veth1_macvtap left promiscuous mode
[ 294.279200][ T8] device veth0_macvtap left promiscuous mode
[ 294.285216][ T8] device veth1_vlan left promiscuous mode
[ 294.285315][ T9190] FAULT_INJECTION: forcing a failure.
[ 294.285315][ T9190] name failslab, interval 1, probability 0, space 0, times 0
[ 294.290936][ T8] device veth0_vlan left promiscuous mode
[ 294.309279][ T9190] CPU: 0 PID: 9190 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 294.318003][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 294.328069][ T9190] Call Trace:
[ 294.331347][ T9190]
[ 294.334317][ T9190] dump_stack_lvl+0xd6/0x122
[ 294.338913][ T9190] dump_stack+0x11/0x1b
[ 294.343144][ T9190] should_fail+0x23c/0x250
[ 294.347626][ T9190] ? __list_lru_init+0x352/0x6d0
[ 294.352584][ T9190] __should_failslab+0x81/0x90
[ 294.357404][ T9190] should_failslab+0x5/0x20
[ 294.361917][ T9190] kmem_cache_alloc_trace+0x52/0x350
[ 294.367255][ T9190] ? __list_lru_init+0x352/0x6d0
[ 294.372348][ T9190] __list_lru_init+0x352/0x6d0
[ 294.377173][ T9190] alloc_super+0x490/0x520
[ 294.381671][ T9190] ? mount_bdev+0x290/0x290
08:44:15 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa880, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000042800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 294.386194][ T9190] sget+0x189/0x370
[ 294.390003][ T9190] ? test_bdev_super+0x30/0x30
[ 294.394776][ T9190] mount_bdev+0xd3/0x290
[ 294.399054][ T9190] ? ext4_mount+0x40/0x40
[ 294.403476][ T9190] ? ext4_errno_to_code+0x110/0x110
[ 294.408682][ T9190] ext4_mount+0x2d/0x40
[ 294.412892][ T9190] legacy_get_tree+0x70/0xc0
[ 294.417516][ T9190] vfs_get_tree+0x4a/0x1a0
[ 294.421936][ T9190] path_mount+0x11cf/0x1c40
[ 294.426439][ T9190] ? kmem_cache_free+0x65/0x110
[ 294.431310][ T9190] __se_sys_mount+0x24b/0x2f0
[ 294.435987][ T9190] __x64_sys_mount+0x63/0x70
[ 294.440579][ T9190] do_syscall_64+0x44/0xd0
[ 294.445003][ T9190] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 294.450959][ T9190] RIP: 0033:0x7fd1bff5001a
[ 294.455373][ T9190] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 294.475010][ T9190] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 294.483424][ T9190] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 294.491397][ T9190] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 294.499386][ T9190] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 294.507367][ T9190] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 294.515377][ T9190] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 294.523353][ T9190]
[ 294.530240][ T9196] loop1: detected capacity change from 0 to 84
08:44:16 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc142, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 294.537322][ T9196] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 294.601949][ T9196] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 294.672486][ T9198] loop4: detected capacity change from 0 to 96
[ 294.681786][ T9196] loop1: detected capacity change from 0 to 84
[ 294.704138][ T9198] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 294.705211][ T9196] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 294.755455][ T9198] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 294.771318][ T9196] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 294.809213][ T9198] loop4: detected capacity change from 0 to 96
[ 294.820222][ T9198] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 294.841683][ T9198] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 294.892008][ T8] bond0 (unregistering): Released all slaves
[ 296.071968][ T9200] chnl_net:caif_netlink_parms(): no params data found
[ 296.109167][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 296.116532][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state
[ 296.125940][ T9200] device bridge_slave_0 entered promiscuous mode
[ 296.135549][ T8] device hsr_slave_0 left promiscuous mode
[ 296.142072][ T8] device hsr_slave_1 left promiscuous mode
[ 296.152745][ T8] device veth1_macvtap left promiscuous mode
[ 296.158850][ T8] device veth0_macvtap left promiscuous mode
[ 296.164841][ T8] device veth1_vlan left promiscuous mode
[ 296.170712][ T8] device veth0_vlan left promiscuous mode
[ 296.290071][ T8] bond0 (unregistering): Released all slaves
[ 296.326968][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 296.334023][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state
[ 296.341940][ T9200] device bridge_slave_1 entered promiscuous mode
[ 296.359144][ T9200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 296.371996][ T9200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 296.391362][ T9200] team0: Port device team_slave_0 added
[ 296.397909][ T9200] team0: Port device team_slave_1 added
[ 296.413143][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 296.420155][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 296.446248][ T9200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 296.458461][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 296.465473][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 296.491443][ T9200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 296.523909][ T9200] device hsr_slave_0 entered promiscuous mode
[ 296.535243][ T9200] device hsr_slave_1 entered promiscuous mode
[ 296.631414][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 296.638493][ T9200] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 296.645808][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 296.653782][ T9200] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 296.681563][ T9200] 8021q: adding VLAN 0 to HW filter on device bond0
[ 296.699117][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 296.714260][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 296.727593][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 296.741125][ T9200] 8021q: adding VLAN 0 to HW filter on device team0
[ 296.751190][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 296.765051][ T19] bridge0: port 1(bridge_slave_0) entered blocking state
[ 296.772181][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 296.792225][ T9200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 296.802612][ T9200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 296.823669][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 296.832247][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 296.839296][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 296.849047][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 296.857767][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 296.867014][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 296.875310][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 296.889359][ T9200] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 296.904990][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 296.912459][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 296.927988][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 296.936715][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 297.007544][ T9215] chnl_net:caif_netlink_parms(): no params data found
[ 297.037705][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 297.047620][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 297.091542][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 297.098695][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 297.110153][ T9215] device bridge_slave_0 entered promiscuous mode
[ 297.117715][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 297.124788][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 297.133593][ T9215] device bridge_slave_1 entered promiscuous mode
[ 297.150708][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 297.161259][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 297.178514][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 297.186858][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 297.195660][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 297.203429][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 297.216436][ T9200] device veth0_vlan entered promiscuous mode
[ 297.226445][ T9200] device veth1_vlan entered promiscuous mode
[ 297.238514][ T9215] team0: Port device team_slave_0 added
[ 297.246769][ T9215] team0: Port device team_slave_1 added
[ 297.258389][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 297.267600][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 297.276619][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 297.285330][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 297.294583][ T9200] device veth0_macvtap entered promiscuous mode
[ 297.316111][ T9200] device veth1_macvtap entered promiscuous mode
[ 297.323377][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 297.330358][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 297.356313][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 297.371231][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 297.381719][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.391590][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 297.401995][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.411815][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 297.422219][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.432026][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 297.442431][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.454749][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 297.462535][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 297.469501][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 297.495429][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 297.508711][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 297.517804][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 297.525939][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 297.534471][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 297.544040][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 297.554498][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.564325][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 297.574831][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.584743][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 297.595174][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.605084][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 297.615518][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.629150][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 297.648500][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 297.657320][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 297.673957][ T9215] device hsr_slave_0 entered promiscuous mode
[ 297.681505][ T9215] device hsr_slave_1 entered promiscuous mode
[ 297.688128][ T9215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 297.697414][ T9215] Cannot create hsr debugfs directory
[ 297.761169][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 297.781474][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 297.790198][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 297.806992][ T9243] device bridge_slave_0 left promiscuous mode
[ 297.813610][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 297.826827][ T9243] device bridge_slave_1 left promiscuous mode
[ 297.833545][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 297.850984][ T9243] bond0: (slave bond_slave_0): Releasing backup interface
[ 297.887538][ T9243] bond0: (slave bond_slave_1): Releasing backup interface
[ 297.958725][ T9243] team0: Port device team_slave_0 removed
[ 298.007213][ T9243] team0: Port device team_slave_1 removed
[ 298.017453][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 298.025255][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 298.038231][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 298.046071][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:19 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000052800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:19 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 74)
08:44:19 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa8c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:19 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc144, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 298.162735][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0
[ 298.179721][ T9250] loop2: detected capacity change from 0 to 512
[ 298.182884][ T9252] loop1: detected capacity change from 0 to 84
[ 298.186443][ T9251] loop4: detected capacity change from 0 to 96
[ 298.193232][ T9252] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 298.212100][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 298.220429][ T9251] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 298.225358][ T9250] FAULT_INJECTION: forcing a failure.
[ 298.225358][ T9250] name failslab, interval 1, probability 0, space 0, times 0
[ 298.241225][ T9250] CPU: 0 PID: 9250 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 298.246974][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 298.249933][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 298.258329][ T9252] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 298.267153][ T9250] Call Trace:
[ 298.267162][ T9250]
[ 298.267168][ T9250] dump_stack_lvl+0xd6/0x122
[ 298.267200][ T9250] dump_stack+0x11/0x1b
[ 298.278201][ T9251] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 298.279728][ T9250] should_fail+0x23c/0x250
[ 298.284769][ T9215] 8021q: adding VLAN 0 to HW filter on device team0
[ 298.287240][ T9250] ? __list_lru_init+0x352/0x6d0
[ 298.297446][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 298.300635][ T9250] __should_failslab+0x81/0x90
[ 298.305799][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 298.311603][ T9250] should_failslab+0x5/0x20
[ 298.311629][ T9250] kmem_cache_alloc_trace+0x52/0x350
[ 298.318074][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 298.324569][ T9250] ? __kmalloc_node+0x30/0x40
[ 298.324594][ T9250] __list_lru_init+0x352/0x6d0
[ 298.329365][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 298.337283][ T9250] alloc_super+0x490/0x520
[ 298.337304][ T9250] ? mount_bdev+0x290/0x290
[ 298.344005][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 298.347045][ T9250] sget+0x189/0x370
[ 298.347066][ T9250] ? test_bdev_super+0x30/0x30
[ 298.347086][ T9250] mount_bdev+0xd3/0x290
[ 298.354643][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 298.358751][ T9250] ? ext4_mount+0x40/0x40
[ 298.365264][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 298.370673][ T9250] ? ext4_errno_to_code+0x110/0x110
[ 298.370712][ T9250] ext4_mount+0x2d/0x40
[ 298.375120][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 298.379575][ T9250] legacy_get_tree+0x70/0xc0
[ 298.397343][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 298.400356][ T9250] vfs_get_tree+0x4a/0x1a0
[ 298.410238][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
08:44:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000062800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 298.412648][ T9250] path_mount+0x11cf/0x1c40
[ 298.420885][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 298.424838][ T9250] ? kmem_cache_free+0x65/0x110
[ 298.431073][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 298.436274][ T9250] __se_sys_mount+0x24b/0x2f0
[ 298.441920][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 298.448226][ T9250] __x64_sys_mount+0x63/0x70
[ 298.454583][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 298.460538][ T9250] do_syscall_64+0x44/0xd0
[ 298.460563][ T9250] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 298.466869][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 298.472911][ T9250] RIP: 0033:0x7fd1bff5001a
[ 298.472930][ T9250] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 298.478552][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 298.485617][ T9250] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 298.485639][ T9250] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 298.485651][ T9250] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 298.485663][ T9250] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 298.497381][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 298.498144][ T9250] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 298.498161][ T9250] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 298.504759][ T9215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 298.510680][ T9250]
[ 298.518488][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 298.643144][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 298.651797][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 298.660139][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 298.675428][ T9252] loop1: detected capacity change from 0 to 84
[ 298.676457][ T9251] loop4: detected capacity change from 0 to 96
[ 298.688473][ T9251] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 298.697104][ T9251] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (12 blocks)
[ 298.698040][ T9252] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 298.735831][ T9252] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 298.771822][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 298.803474][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 298.820447][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 298.894106][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 298.902957][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 298.959745][ T9215] device veth0_vlan entered promiscuous mode
[ 298.969163][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 298.977747][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 298.993278][ T9215] device veth1_vlan entered promiscuous mode
[ 299.000224][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 299.009072][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 299.017004][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 299.030709][ T9215] device veth0_macvtap entered promiscuous mode
[ 299.042574][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 299.050656][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 299.060137][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 299.069585][ T9215] device veth1_macvtap entered promiscuous mode
[ 299.082058][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 299.095829][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 299.106379][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.116244][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 299.126669][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.136497][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 299.147020][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.156924][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 299.167342][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.178895][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 299.193492][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 299.202737][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 299.213043][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 299.223505][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.233343][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 299.243810][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.253816][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 299.264246][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.274093][ T9215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 299.284518][ T9215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 299.296704][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 299.309361][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 299.318896][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 299.390550][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 299.412216][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 299.421071][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 299.439706][ T9270] device bridge_slave_0 left promiscuous mode
[ 299.446460][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state
[ 299.460986][ T9270] device bridge_slave_1 left promiscuous mode
[ 299.468037][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state
[ 299.485869][ T9270] bond0: (slave bond_slave_0): Releasing backup interface
[ 299.523891][ T9270] bond0: (slave bond_slave_1): Releasing backup interface
[ 299.600038][ T9270] team0: Port device team_slave_0 removed
[ 299.649045][ T9270] team0: Port device team_slave_1 removed
[ 299.660850][ T9270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 299.669070][ T9270] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 299.685269][ T9270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 299.693115][ T9270] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:21 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\a(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:21 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 75)
08:44:21 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa8c5, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:21 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x12dda, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:21 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 299.784480][ T9275] loop1: detected capacity change from 0 to 84
[ 299.795468][ T9277] loop4: detected capacity change from 0 to 150
[ 299.806497][ T9279] loop2: detected capacity change from 0 to 512
[ 299.813430][ T9279] FAULT_INJECTION: forcing a failure.
[ 299.813430][ T9279] name failslab, interval 1, probability 0, space 0, times 0
[ 299.826140][ T9279] CPU: 0 PID: 9279 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 299.834865][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 299.844992][ T9279] Call Trace:
[ 299.848268][ T9279]
[ 299.851369][ T9279] dump_stack_lvl+0xd6/0x122
[ 299.855964][ T9279] dump_stack+0x11/0x1b
[ 299.860125][ T9279] should_fail+0x23c/0x250
[ 299.864559][ T9279] ? __list_lru_init+0x352/0x6d0
[ 299.869496][ T9279] __should_failslab+0x81/0x90
[ 299.874262][ T9279] should_failslab+0x5/0x20
[ 299.878828][ T9279] kmem_cache_alloc_trace+0x52/0x350
[ 299.884198][ T9279] ? __list_lru_init+0x352/0x6d0
[ 299.889140][ T9279] __list_lru_init+0x352/0x6d0
[ 299.894017][ T9279] alloc_super+0x490/0x520
[ 299.898468][ T9279] ? mount_bdev+0x290/0x290
[ 299.903000][ T9279] sget+0x189/0x370
[ 299.906832][ T9279] ? test_bdev_super+0x30/0x30
[ 299.911685][ T9279] mount_bdev+0xd3/0x290
[ 299.916795][ T9279] ? ext4_mount+0x40/0x40
[ 299.921128][ T9279] ? ext4_errno_to_code+0x110/0x110
[ 299.926327][ T9279] ext4_mount+0x2d/0x40
[ 299.926398][ T9277] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 299.930482][ T9279] legacy_get_tree+0x70/0xc0
[ 299.943252][ T9279] vfs_get_tree+0x4a/0x1a0
[ 299.947719][ T9279] path_mount+0x11cf/0x1c40
[ 299.952208][ T9279] ? kmem_cache_free+0x65/0x110
[ 299.957121][ T9279] __se_sys_mount+0x24b/0x2f0
[ 299.961779][ T9279] __x64_sys_mount+0x63/0x70
[ 299.966432][ T9279] do_syscall_64+0x44/0xd0
[ 299.970837][ T9279] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 299.976713][ T9279] RIP: 0033:0x7fd1bff5001a
[ 299.981257][ T9279] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 300.002831][ T9279] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 300.011246][ T9279] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 300.019210][ T9279] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 300.027171][ T9279] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
08:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\b(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.035125][ T9279] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 300.043122][ T9279] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 300.051081][ T9279]
[ 300.056251][ T9275] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\t(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.093024][ T9275] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 300.114908][ T9277] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (18 blocks)
08:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\n(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.195374][ T9275] loop1: detected capacity change from 0 to 84
[ 300.206981][ T9277] loop4: detected capacity change from 0 to 150
[ 300.223303][ T9275] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 300.234441][ T9275] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:21 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 300.244324][ T9277] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:44:21 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 76)
08:44:21 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:21 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa8c6, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\v(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.298407][ T1835] device hsr_slave_0 left promiscuous mode
[ 300.313737][ T1835] device hsr_slave_1 left promiscuous mode
[ 300.341383][ T9290] loop1: detected capacity change from 0 to 84
[ 300.358409][ T1835] device veth1_macvtap left promiscuous mode
[ 300.359760][ T9293] loop2: detected capacity change from 0 to 512
[ 300.364483][ T1835] device veth0_macvtap left promiscuous mode
[ 300.364509][ T1835] device veth1_vlan left promiscuous mode
[ 300.364529][ T1835] device veth0_vlan left promiscuous mode
08:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\f(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.389816][ T9290] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 300.419877][ T9293] FAULT_INJECTION: forcing a failure.
[ 300.419877][ T9293] name failslab, interval 1, probability 0, space 0, times 0
[ 300.432526][ T9293] CPU: 0 PID: 9293 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
08:44:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000f2800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.441198][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 300.451305][ T9293] Call Trace:
[ 300.454585][ T9293]
[ 300.457516][ T9293] dump_stack_lvl+0xd6/0x122
[ 300.462159][ T9293] dump_stack+0x11/0x1b
[ 300.466321][ T9293] should_fail+0x23c/0x250
[ 300.470767][ T9293] ? __list_lru_init+0x352/0x6d0
[ 300.475728][ T9293] __should_failslab+0x81/0x90
[ 300.480572][ T9293] should_failslab+0x5/0x20
[ 300.485081][ T9293] kmem_cache_alloc_trace+0x52/0x350
[ 300.490407][ T9293] ? __list_lru_init+0x352/0x6d0
[ 300.495431][ T9293] __list_lru_init+0x352/0x6d0
[ 300.500195][ T9293] alloc_super+0x490/0x520
[ 300.504714][ T9293] ? mount_bdev+0x290/0x290
[ 300.509222][ T9293] sget+0x189/0x370
[ 300.513045][ T9293] ? test_bdev_super+0x30/0x30
[ 300.517814][ T9293] mount_bdev+0xd3/0x290
[ 300.522073][ T9293] ? ext4_mount+0x40/0x40
[ 300.526412][ T9293] ? ext4_errno_to_code+0x110/0x110
[ 300.531660][ T9293] ext4_mount+0x2d/0x40
[ 300.535823][ T9293] legacy_get_tree+0x70/0xc0
[ 300.540419][ T9293] vfs_get_tree+0x4a/0x1a0
[ 300.544929][ T9293] path_mount+0x11cf/0x1c40
[ 300.549437][ T9293] ? kmem_cache_free+0x65/0x110
[ 300.553443][ T9277] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 300.554351][ T9293] __se_sys_mount+0x24b/0x2f0
[ 300.568308][ T9293] __x64_sys_mount+0x63/0x70
[ 300.572981][ T9293] do_syscall_64+0x44/0xd0
[ 300.577401][ T9293] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 300.583331][ T9293] RIP: 0033:0x7fd1bff5001a
[ 300.587737][ T9293] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 300.607382][ T9293] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 300.615808][ T9293] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 300.623861][ T9293] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 300.631872][ T9293] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 300.639950][ T9293] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 300.647952][ T9293] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 300.656004][ T9293]
[ 300.662029][ T9290] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000102800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 300.706141][ T9290] loop1: detected capacity change from 0 to 84
[ 300.722881][ T9290] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 300.742245][ T9290] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 300.997099][ T1835] bond0 (unregistering): Released all slaves
[ 302.180265][ T1835] device hsr_slave_0 left promiscuous mode
[ 302.188338][ T1835] device hsr_slave_1 left promiscuous mode
[ 302.196890][ T1835] device veth1_macvtap left promiscuous mode
[ 302.202891][ T1835] device veth0_macvtap left promiscuous mode
[ 302.208926][ T1835] device veth1_vlan left promiscuous mode
[ 302.214721][ T1835] device veth0_vlan left promiscuous mode
[ 302.338715][ T1835] bond0 (unregistering): Released all slaves
[ 302.387612][ T9306] chnl_net:caif_netlink_parms(): no params data found
[ 302.422105][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 302.429210][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state
[ 302.437358][ T9306] device bridge_slave_0 entered promiscuous mode
[ 302.444684][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 302.451730][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state
[ 302.460858][ T9306] device bridge_slave_1 entered promiscuous mode
[ 302.497885][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 302.508154][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 302.547098][ T9306] team0: Port device team_slave_0 added
[ 302.565174][ T9306] team0: Port device team_slave_1 added
[ 302.581315][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 302.588312][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 302.614201][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 302.628400][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 302.635387][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 302.661291][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 302.687935][ T9306] device hsr_slave_0 entered promiscuous mode
[ 302.694471][ T9306] device hsr_slave_1 entered promiscuous mode
[ 302.771994][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 302.779102][ T9306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 302.786423][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 302.793478][ T9306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 302.830063][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0
[ 302.868071][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 302.876237][ T19] bridge0: port 1(bridge_slave_0) entered disabled state
[ 302.894839][ T19] bridge0: port 2(bridge_slave_1) entered disabled state
[ 302.906055][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 302.927803][ T9306] 8021q: adding VLAN 0 to HW filter on device team0
[ 302.948028][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 302.956509][ T19] bridge0: port 1(bridge_slave_0) entered blocking state
[ 302.963526][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 302.980810][ T9306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 302.991185][ T9306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 303.017331][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 303.025873][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 303.032903][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 303.041769][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 303.050491][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 303.059881][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 303.068157][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 303.082506][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 303.110849][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 303.118381][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 303.127113][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 303.134746][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 303.150948][ T9320] chnl_net:caif_netlink_parms(): no params data found
[ 303.225914][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 303.232997][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 303.250486][ T9320] device bridge_slave_0 entered promiscuous mode
[ 303.257784][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 303.264849][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 303.272922][ T9320] device bridge_slave_1 entered promiscuous mode
[ 303.295571][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 303.307369][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 303.318141][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 303.350705][ T9320] team0: Port device team_slave_0 added
[ 303.364337][ T9320] team0: Port device team_slave_1 added
[ 303.394998][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 303.401969][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 303.427948][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 303.442690][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 303.449678][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 303.475668][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 303.499753][ T9306] device veth0_vlan entered promiscuous mode
[ 303.508535][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 303.516627][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 303.537549][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 303.546336][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 303.556639][ T9320] device hsr_slave_0 entered promiscuous mode
[ 303.563097][ T9320] device hsr_slave_1 entered promiscuous mode
[ 303.570780][ T9320] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 303.578495][ T9320] Cannot create hsr debugfs directory
[ 303.585441][ T9306] device veth1_vlan entered promiscuous mode
[ 303.601726][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 303.610893][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 303.626821][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 303.635308][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 303.644865][ T9306] device veth0_macvtap entered promiscuous mode
[ 303.652669][ T9306] device veth1_macvtap entered promiscuous mode
[ 303.679568][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 303.690152][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.699969][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 303.710385][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.720210][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 303.730745][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.740585][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 303.751039][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.762474][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 303.771222][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 303.779704][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 303.787640][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 303.796145][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 303.806413][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 303.816871][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.826752][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 303.837207][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.847031][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 303.857734][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.867648][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 303.878122][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 303.889937][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 303.899944][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 303.908594][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 303.957827][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 303.978784][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 303.990573][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 304.002319][ T9320] 8021q: adding VLAN 0 to HW filter on device team0
[ 304.024172][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 304.045750][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 304.054068][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 304.070844][ T9349] device bridge_slave_0 left promiscuous mode
[ 304.077579][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state
[ 304.091557][ T9349] device bridge_slave_1 left promiscuous mode
[ 304.098325][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state
[ 304.116383][ T9349] bond0: (slave bond_slave_0): Releasing backup interface
[ 304.152475][ T9349] bond0: (slave bond_slave_1): Releasing backup interface
[ 304.228426][ T9349] team0: Port device team_slave_0 removed
[ 304.277961][ T9349] team0: Port device team_slave_1 removed
[ 304.287914][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 304.295752][ T9349] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 304.309640][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 304.317590][ T9349] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:25 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:25 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x12eec, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000112800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:25 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa8c7, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:25 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 77)
[ 304.380735][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 304.391604][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
08:44:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000142800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 304.424847][ T9357] loop1: detected capacity change from 0 to 84
[ 304.427126][ T9358] loop2: detected capacity change from 0 to 512
[ 304.439156][ T9352] loop4: detected capacity change from 0 to 151
[ 304.446936][ T77] bridge0: port 1(bridge_slave_0) entered blocking state
[ 304.454101][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 304.454479][ T9352] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 304.471773][ T9358] FAULT_INJECTION: forcing a failure.
[ 304.471773][ T9358] name failslab, interval 1, probability 0, space 0, times 0
[ 304.474737][ T9357] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 304.484420][ T9358] CPU: 1 PID: 9358 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 304.501169][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 304.511207][ T9358] Call Trace:
[ 304.514468][ T9358]
[ 304.517383][ T9358] dump_stack_lvl+0xd6/0x122
[ 304.521985][ T9358] dump_stack+0x11/0x1b
[ 304.526125][ T9358] should_fail+0x23c/0x250
[ 304.530544][ T9358] ? __list_lru_init+0x352/0x6d0
[ 304.535467][ T9358] __should_failslab+0x81/0x90
[ 304.540229][ T9358] should_failslab+0x5/0x20
[ 304.544727][ T9358] kmem_cache_alloc_trace+0x52/0x350
[ 304.550080][ T9358] ? __list_lru_init+0x352/0x6d0
[ 304.555001][ T9358] __list_lru_init+0x352/0x6d0
[ 304.559747][ T9358] alloc_super+0x490/0x520
[ 304.564197][ T9358] ? mount_bdev+0x290/0x290
[ 304.568693][ T9358] sget+0x189/0x370
[ 304.572569][ T9358] ? test_bdev_super+0x30/0x30
[ 304.577359][ T9358] mount_bdev+0xd3/0x290
[ 304.581584][ T9358] ? ext4_mount+0x40/0x40
[ 304.585900][ T9358] ? ext4_errno_to_code+0x110/0x110
[ 304.591084][ T9358] ext4_mount+0x2d/0x40
[ 304.595226][ T9358] legacy_get_tree+0x70/0xc0
[ 304.599879][ T9358] vfs_get_tree+0x4a/0x1a0
[ 304.604279][ T9358] path_mount+0x11cf/0x1c40
[ 304.608793][ T9358] ? kmem_cache_free+0x65/0x110
[ 304.613676][ T9358] __se_sys_mount+0x24b/0x2f0
[ 304.618395][ T9358] __x64_sys_mount+0x63/0x70
[ 304.622968][ T9358] do_syscall_64+0x44/0xd0
[ 304.627421][ T9358] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 304.633341][ T9358] RIP: 0033:0x7fd1bff5001a
[ 304.637738][ T9358] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 304.657327][ T9358] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 304.665961][ T9358] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 304.673968][ T9358] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 304.681951][ T9358] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 304.689923][ T9358] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 304.697891][ T9358] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 304.705853][ T9358]
[ 304.710734][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 304.715591][ T9352] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 304.729040][ T9357] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 304.731325][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 304.759627][ T77] bridge0: port 2(bridge_slave_1) entered blocking state
[ 304.766743][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 304.774889][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 304.783902][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 304.794944][ T9352] loop4: detected capacity change from 0 to 151
[ 304.796494][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 304.809804][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 304.819545][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 304.827795][ T9352] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 304.828350][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 304.851549][ T9320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 304.861913][ T9320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 304.873700][ T9352] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (18 blocks)
[ 304.887967][ T9357] loop1: detected capacity change from 0 to 84
[ 304.894397][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 304.901532][ T9357] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 304.911863][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 304.918293][ T9357] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 304.935377][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 304.945602][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 304.954175][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 304.962726][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 304.971240][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 305.025005][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 305.079325][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 305.088257][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 305.153247][ T9320] device veth0_vlan entered promiscuous mode
[ 305.161386][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 305.169890][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 305.181962][ T9320] device veth1_vlan entered promiscuous mode
[ 305.189053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 305.197906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 305.205766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 305.224425][ T9320] device veth0_macvtap entered promiscuous mode
[ 305.232136][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 305.240495][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 305.248962][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 305.258798][ T9320] device veth1_macvtap entered promiscuous mode
[ 305.272881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 305.281142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 305.292375][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 305.303120][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.313018][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 305.323444][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.333310][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 305.343818][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.353747][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 305.364300][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.377258][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 305.388355][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 305.397134][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 305.406883][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 305.417403][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.427324][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 305.437766][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.447605][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 305.458055][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.467869][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 305.478292][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 305.490720][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 305.507421][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 305.515916][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 305.579384][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 305.601236][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 305.612793][ T9376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 305.632227][ T9376] device bridge_slave_0 left promiscuous mode
[ 305.639039][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 305.655396][ T9376] device bridge_slave_1 left promiscuous mode
[ 305.662025][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 305.679919][ T9376] bond0: (slave bond_slave_0): Releasing backup interface
[ 305.720271][ T9376] bond0: (slave bond_slave_1): Releasing backup interface
[ 305.796249][ T9376] team0: Port device team_slave_0 removed
[ 305.844027][ T9376] team0: Port device team_slave_1 removed
[ 305.854831][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 305.862571][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 305.876742][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 305.884562][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:27 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00`(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:27 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 78)
08:44:27 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1320c, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:27 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa900, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:27 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 305.964531][ T9380] loop2: detected capacity change from 0 to 512
[ 305.972038][ T9383] loop1: detected capacity change from 0 to 84
[ 305.973159][ T9384] loop4: detected capacity change from 0 to 153
[ 305.993283][ T9380] FAULT_INJECTION: forcing a failure.
[ 305.993283][ T9380] name failslab, interval 1, probability 0, space 0, times 0
[ 306.005933][ T9380] CPU: 0 PID: 9380 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
08:44:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 306.014720][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 306.024771][ T9380] Call Trace:
[ 306.028051][ T9380]
[ 306.030995][ T9380] dump_stack_lvl+0xd6/0x122
[ 306.035651][ T9380] dump_stack+0x11/0x1b
[ 306.039864][ T9380] should_fail+0x23c/0x250
[ 306.044322][ T9380] ? __list_lru_init+0x352/0x6d0
[ 306.049259][ T9380] __should_failslab+0x81/0x90
[ 306.054050][ T9380] should_failslab+0x5/0x20
[ 306.058565][ T9380] kmem_cache_alloc_trace+0x52/0x350
[ 306.063922][ T9380] ? __list_lru_init+0x352/0x6d0
[ 306.068873][ T9380] __list_lru_init+0x352/0x6d0
[ 306.073711][ T9380] alloc_super+0x490/0x520
[ 306.078181][ T9380] ? mount_bdev+0x290/0x290
[ 306.082708][ T9380] sget+0x189/0x370
[ 306.086589][ T9380] ? test_bdev_super+0x30/0x30
[ 306.091350][ T9380] mount_bdev+0xd3/0x290
[ 306.095595][ T9380] ? ext4_mount+0x40/0x40
[ 306.099986][ T9380] ? ext4_errno_to_code+0x110/0x110
[ 306.105263][ T9380] ext4_mount+0x2d/0x40
[ 306.109424][ T9380] legacy_get_tree+0x70/0xc0
08:44:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00w\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 306.114048][ T9380] vfs_get_tree+0x4a/0x1a0
[ 306.118581][ T9380] path_mount+0x11cf/0x1c40
[ 306.123632][ T9380] ? kmem_cache_free+0x65/0x110
[ 306.128562][ T9380] __se_sys_mount+0x24b/0x2f0
[ 306.133361][ T9380] __x64_sys_mount+0x63/0x70
[ 306.135480][ T9384] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 306.138020][ T9380] do_syscall_64+0x44/0xd0
[ 306.138046][ T9380] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 306.156498][ T9380] RIP: 0033:0x7fd1bff5001a
[ 306.160974][ T9380] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 306.180713][ T9380] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 306.189143][ T9380] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 306.197132][ T9380] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 306.205131][ T9380] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 306.213088][ T9380] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 306.221057][ T9380] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 306.229132][ T9380]
[ 306.238654][ T9383] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 306.261632][ T9390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=9390 comm=syz-executor.5
[ 306.278714][ T9383] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:27 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 306.360974][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 306.388109][ T9383] loop1: detected capacity change from 0 to 84
08:44:28 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001100270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 306.415187][ T9383] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 306.426743][ T1835] device hsr_slave_0 left promiscuous mode
[ 306.436080][ T9383] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 306.455746][ T1835] device hsr_slave_1 left promiscuous mode
[ 306.464337][ T1835] device veth1_macvtap left promiscuous mode
[ 306.470453][ T1835] device veth0_macvtap left promiscuous mode
[ 306.476490][ T1835] device veth1_vlan left promiscuous mode
[ 306.482217][ T1835] device veth0_vlan left promiscuous mode
08:44:28 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa940, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 306.520784][ T9384] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (19 blocks)
[ 306.576828][ T9398] loop1: detected capacity change from 0 to 84
[ 306.609436][ T9384] loop4: detected capacity change from 0 to 153
[ 306.616992][ T9398] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 306.626807][ T9384] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 306.651331][ T9384] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (19 blocks)
[ 306.661964][ T9398] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:28 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 79)
08:44:28 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x20000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 306.737186][ T9398] loop1: detected capacity change from 0 to 84
[ 306.757261][ T9398] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 306.793450][ T9401] loop2: detected capacity change from 0 to 512
[ 306.793681][ T9402] loop4: detected capacity change from 0 to 256
[ 306.815650][ T9401] FAULT_INJECTION: forcing a failure.
[ 306.815650][ T9401] name failslab, interval 1, probability 0, space 0, times 0
[ 306.828372][ T9401] CPU: 1 PID: 9401 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 306.837150][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 306.847282][ T9401] Call Trace:
[ 306.850588][ T9401]
[ 306.853607][ T9401] dump_stack_lvl+0xd6/0x122
[ 306.858251][ T9401] dump_stack+0x11/0x1b
[ 306.862414][ T9401] should_fail+0x23c/0x250
[ 306.866825][ T9401] ? __list_lru_init+0x352/0x6d0
[ 306.871802][ T9401] __should_failslab+0x81/0x90
[ 306.876720][ T9401] should_failslab+0x5/0x20
[ 306.881255][ T9401] kmem_cache_alloc_trace+0x52/0x350
[ 306.886625][ T9401] ? __list_lru_init+0x352/0x6d0
[ 306.891658][ T9401] __list_lru_init+0x352/0x6d0
[ 306.896427][ T9401] alloc_super+0x490/0x520
[ 306.900935][ T9401] ? mount_bdev+0x290/0x290
[ 306.905510][ T9401] sget+0x189/0x370
[ 306.909320][ T9401] ? test_bdev_super+0x30/0x30
[ 306.914154][ T9401] mount_bdev+0xd3/0x290
[ 306.918406][ T9401] ? ext4_mount+0x40/0x40
[ 306.922737][ T9401] ? ext4_errno_to_code+0x110/0x110
[ 306.928067][ T9401] ext4_mount+0x2d/0x40
[ 306.932278][ T9401] legacy_get_tree+0x70/0xc0
[ 306.936872][ T9401] vfs_get_tree+0x4a/0x1a0
[ 306.941328][ T9401] path_mount+0x11cf/0x1c40
[ 306.945829][ T9401] ? kmem_cache_free+0x65/0x110
[ 306.950681][ T9401] __se_sys_mount+0x24b/0x2f0
[ 306.955359][ T9401] __x64_sys_mount+0x63/0x70
[ 306.960041][ T9401] do_syscall_64+0x44/0xd0
[ 306.964498][ T9401] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 306.970424][ T9401] RIP: 0033:0x7fd1bff5001a
[ 306.974842][ T9401] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 306.994462][ T9401] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 307.002876][ T9401] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 307.011026][ T9401] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 307.019055][ T9401] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 307.027040][ T9401] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 307.035075][ T9401] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 307.043122][ T9401]
[ 307.048043][ T9398] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 307.059962][ T9402] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 307.082345][ T9402] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (32 blocks)
08:44:28 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 80)
08:44:28 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa96d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 307.112406][ T1835] bond0 (unregistering): Released all slaves
[ 307.146418][ T9402] loop4: detected capacity change from 0 to 256
[ 307.166286][ T9402] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 307.176910][ T9396] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 307.201922][ T9405] loop1: detected capacity change from 0 to 84
[ 307.211779][ T9402] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (32 blocks)
[ 307.227137][ T9405] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 307.246823][ T9405] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 307.296018][ T9405] loop1: detected capacity change from 0 to 84
[ 307.306854][ T9405] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 307.328116][ T9405] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 307.555315][ T9407] loop2: detected capacity change from 0 to 512
[ 307.562429][ T9407] FAULT_INJECTION: forcing a failure.
[ 307.562429][ T9407] name failslab, interval 1, probability 0, space 0, times 0
[ 307.575094][ T9407] CPU: 0 PID: 9407 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 307.583976][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 307.594022][ T9407] Call Trace:
[ 307.597286][ T9407]
[ 307.600210][ T9407] dump_stack_lvl+0xd6/0x122
[ 307.604788][ T9407] dump_stack+0x11/0x1b
[ 307.608984][ T9407] should_fail+0x23c/0x250
[ 307.613404][ T9407] ? __list_lru_init+0x352/0x6d0
[ 307.618581][ T9407] __should_failslab+0x81/0x90
[ 307.623342][ T9407] should_failslab+0x5/0x20
[ 307.627857][ T9407] kmem_cache_alloc_trace+0x52/0x350
[ 307.633213][ T9407] ? __list_lru_init+0x352/0x6d0
[ 307.638196][ T9407] __list_lru_init+0x352/0x6d0
[ 307.642951][ T9407] alloc_super+0x490/0x520
[ 307.647361][ T9407] ? mount_bdev+0x290/0x290
[ 307.651858][ T9407] sget+0x189/0x370
[ 307.655646][ T9407] ? test_bdev_super+0x30/0x30
[ 307.660400][ T9407] mount_bdev+0xd3/0x290
[ 307.664649][ T9407] ? ext4_mount+0x40/0x40
[ 307.668969][ T9407] ? ext4_errno_to_code+0x110/0x110
[ 307.674268][ T9407] ext4_mount+0x2d/0x40
[ 307.678408][ T9407] legacy_get_tree+0x70/0xc0
[ 307.684388][ T9407] vfs_get_tree+0x4a/0x1a0
[ 307.688805][ T9407] path_mount+0x11cf/0x1c40
[ 307.693373][ T9407] ? kmem_cache_free+0x65/0x110
[ 307.698221][ T9407] __se_sys_mount+0x24b/0x2f0
[ 307.702884][ T9407] __x64_sys_mount+0x63/0x70
[ 307.707465][ T9407] do_syscall_64+0x44/0xd0
[ 307.711929][ T9407] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 307.717861][ T9407] RIP: 0033:0x7fd1bff5001a
[ 307.722312][ T9407] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 307.742039][ T9407] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 307.750433][ T9407] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 307.758387][ T9407] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 307.766343][ T9407] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 307.774296][ T9407] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 307.782269][ T9407] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 307.790226][ T9407]
[ 308.356986][ T9409] chnl_net:caif_netlink_parms(): no params data found
[ 308.398652][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 308.405729][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state
[ 308.413521][ T9409] device bridge_slave_0 entered promiscuous mode
[ 308.425564][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 308.432603][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state
[ 308.440516][ T9409] device bridge_slave_1 entered promiscuous mode
[ 308.458137][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 308.473443][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 308.492987][ T9409] team0: Port device team_slave_0 added
[ 308.499508][ T9409] team0: Port device team_slave_1 added
[ 308.518834][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 308.525879][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 308.551971][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 308.564895][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 308.571832][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 308.597779][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 308.610163][ T1835] device hsr_slave_0 left promiscuous mode
[ 308.616517][ T1835] device hsr_slave_1 left promiscuous mode
[ 308.624996][ T1835] device veth1_macvtap left promiscuous mode
[ 308.630980][ T1835] device veth0_macvtap left promiscuous mode
[ 308.637056][ T1835] device veth1_vlan left promiscuous mode
[ 308.642832][ T1835] device veth0_vlan left promiscuous mode
[ 308.760188][ T1835] bond0 (unregistering): Released all slaves
[ 308.820019][ T9409] device hsr_slave_0 entered promiscuous mode
[ 308.826717][ T9409] device hsr_slave_1 entered promiscuous mode
[ 308.887765][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 308.894830][ T9409] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 308.902056][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 308.909129][ T9409] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 308.939605][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0
[ 308.950345][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 308.959999][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 308.967837][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 308.982107][ T9409] 8021q: adding VLAN 0 to HW filter on device team0
[ 308.993688][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 309.003098][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 309.010151][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 309.026929][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 309.036378][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 309.043498][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 309.052302][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 309.066552][ T9409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 309.076933][ T9409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 309.090211][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 309.098329][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 309.108636][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 309.119110][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 309.133318][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 309.143770][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 309.152460][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 309.159995][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 309.274623][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 309.292807][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 309.398439][ T9409] device veth0_vlan entered promiscuous mode
[ 309.404879][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 309.412865][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 309.429966][ T9409] device veth1_vlan entered promiscuous mode
[ 309.438025][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 309.445923][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 309.453502][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 309.476484][ T9409] device veth0_macvtap entered promiscuous mode
[ 309.484269][ T9409] device veth1_macvtap entered promiscuous mode
[ 309.492927][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 309.501038][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 309.509577][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 309.517906][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 309.529417][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 309.539877][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.549730][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 309.560161][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.570003][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 309.580428][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.590252][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 309.600712][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.613618][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 309.626099][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 309.634162][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 309.642764][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 309.657111][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 309.667651][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.677511][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 309.687959][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.697767][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 309.708179][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.718069][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 309.728491][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 309.741938][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 309.751561][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 309.761198][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 309.823371][ T9432] chnl_net:caif_netlink_parms(): no params data found
[ 309.866439][ T9448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 309.888942][ T9448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 309.898887][ T9448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 309.920310][ T9448] device bridge_slave_0 left promiscuous mode
[ 309.927162][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 309.941368][ T9448] device bridge_slave_1 left promiscuous mode
[ 309.948496][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 309.967026][ T9448] bond0: (slave bond_slave_0): Releasing backup interface
[ 310.006693][ T9448] bond0: (slave bond_slave_1): Releasing backup interface
[ 310.085943][ T9448] team0: Port device team_slave_0 removed
[ 310.139115][ T9448] team0: Port device team_slave_1 removed
[ 310.149806][ T9448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 310.157935][ T9448] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 310.172736][ T9448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 310.180706][ T9448] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:31 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001200270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:31 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x30000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:31 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa96e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:31 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 81)
[ 310.280053][ T9454] loop1: detected capacity change from 0 to 84
[ 310.288648][ T9457] loop2: detected capacity change from 0 to 512
[ 310.290181][ T9458] loop4: detected capacity change from 0 to 384
[ 310.303122][ T9457] FAULT_INJECTION: forcing a failure.
[ 310.303122][ T9457] name failslab, interval 1, probability 0, space 0, times 0
[ 310.303499][ T9459] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 310.315869][ T9457] CPU: 1 PID: 9457 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 310.315893][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 310.335828][ T9458] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 310.343851][ T9457] Call Trace:
[ 310.343861][ T9457]
[ 310.358151][ T9457] dump_stack_lvl+0xd6/0x122
[ 310.362730][ T9457] dump_stack+0x11/0x1b
[ 310.366878][ T9457] should_fail+0x23c/0x250
[ 310.371305][ T9457] ? __list_lru_init+0x352/0x6d0
[ 310.376341][ T9457] __should_failslab+0x81/0x90
[ 310.381173][ T9457] should_failslab+0x5/0x20
[ 310.385718][ T9457] kmem_cache_alloc_trace+0x52/0x350
[ 310.391041][ T9457] ? __list_lru_init+0x352/0x6d0
[ 310.395965][ T9457] __list_lru_init+0x352/0x6d0
[ 310.400727][ T9457] alloc_super+0x490/0x520
[ 310.405129][ T9457] ? mount_bdev+0x290/0x290
[ 310.409634][ T9457] sget+0x189/0x370
[ 310.413464][ T9457] ? test_bdev_super+0x30/0x30
[ 310.418236][ T9457] mount_bdev+0xd3/0x290
[ 310.422592][ T9457] ? ext4_mount+0x40/0x40
[ 310.426915][ T9457] ? ext4_errno_to_code+0x110/0x110
[ 310.432098][ T9457] ext4_mount+0x2d/0x40
[ 310.436292][ T9457] legacy_get_tree+0x70/0xc0
[ 310.441160][ T9457] vfs_get_tree+0x4a/0x1a0
[ 310.445687][ T9457] path_mount+0x11cf/0x1c40
[ 310.450188][ T9457] ? kmem_cache_free+0x65/0x110
[ 310.455027][ T9457] __se_sys_mount+0x24b/0x2f0
[ 310.459702][ T9457] __x64_sys_mount+0x63/0x70
[ 310.464362][ T9457] do_syscall_64+0x44/0xd0
[ 310.468777][ T9457] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 310.474671][ T9457] RIP: 0033:0x7fd1bff5001a
[ 310.479106][ T9457] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 310.498697][ T9457] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 310.507224][ T9457] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 310.515178][ T9457] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 310.523337][ T9457] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 310.531293][ T9457] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 310.539254][ T9457] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 310.547360][ T9457]
[ 310.565528][ T9454] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 310.580918][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 310.588000][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state
[ 310.599144][ T9454] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 310.608581][ T9458] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (48 blocks)
[ 310.609151][ T9432] device bridge_slave_0 entered promiscuous mode
[ 310.672121][ T9454] loop1: detected capacity change from 0 to 84
[ 310.672696][ T9458] loop4: detected capacity change from 0 to 384
[ 310.678711][ T9454] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 310.695140][ T9458] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 310.695908][ T9454] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 310.714184][ T9458] EXT4-fs (loop4): bad geometry: block count 64 exceeds size of device (48 blocks)
[ 310.723843][ T9459] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 310.733461][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 310.740620][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 310.759336][ T9432] device bridge_slave_1 entered promiscuous mode
[ 310.826272][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 310.842561][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 310.861471][ T9432] team0: Port device team_slave_0 added
[ 310.869725][ T9432] team0: Port device team_slave_1 added
[ 310.893073][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 310.900083][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 310.926234][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 310.937706][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 310.944633][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 310.970573][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 310.994230][ T9432] device hsr_slave_0 entered promiscuous mode
[ 311.002039][ T9432] device hsr_slave_1 entered promiscuous mode
[ 311.011647][ T9432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 311.019208][ T9432] Cannot create hsr debugfs directory
[ 311.058809][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 311.065918][ T9432] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 311.073175][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 311.080209][ T9432] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 311.111939][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0
[ 311.124584][ T5] bridge0: port 1(bridge_slave_0) entered disabled state
[ 311.133010][ T5] bridge0: port 2(bridge_slave_1) entered disabled state
[ 311.143616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 311.153580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 311.162242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 311.171304][ T9432] 8021q: adding VLAN 0 to HW filter on device team0
[ 311.185487][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 311.193747][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 311.200780][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 311.218550][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 311.228229][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 311.235300][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 311.246117][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 311.259808][ T9432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 311.270366][ T9432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 311.288165][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 311.296261][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 311.304850][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 311.313376][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 311.334583][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 311.343290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 311.351189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 311.358936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 311.416829][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 311.426787][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 311.482204][ T9432] device veth0_vlan entered promiscuous mode
[ 311.488898][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 311.498656][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 311.507221][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 311.516305][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 311.526564][ T2005] device hsr_slave_0 left promiscuous mode
[ 311.532694][ T2005] device hsr_slave_1 left promiscuous mode
[ 311.542728][ T2005] device veth1_macvtap left promiscuous mode
[ 311.548900][ T2005] device veth0_macvtap left promiscuous mode
[ 311.554913][ T2005] device veth1_vlan left promiscuous mode
[ 311.560633][ T2005] device veth0_vlan left promiscuous mode
[ 311.688385][ T2005] bond0 (unregistering): Released all slaves
[ 311.731501][ T9432] device veth1_vlan entered promiscuous mode
[ 311.744615][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 311.754250][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 311.762472][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 311.772074][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 311.781610][ T9432] device veth0_macvtap entered promiscuous mode
[ 311.791251][ T9432] device veth1_macvtap entered promiscuous mode
[ 311.802252][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 311.812796][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.822620][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 311.833145][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.843051][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 311.853468][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.863382][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 311.873865][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.886872][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 311.894702][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 311.902888][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 311.910972][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 311.919424][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 311.928496][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 311.938935][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.948798][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 311.959212][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.969126][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 311.979547][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 311.989358][ T9432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 311.999845][ T9432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 312.012497][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 312.020415][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 312.029263][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 312.093681][ T9476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 312.115980][ T9476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 312.124385][ T9476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 312.145445][ T9476] device bridge_slave_0 left promiscuous mode
[ 312.152074][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state
[ 312.167862][ T9476] device bridge_slave_1 left promiscuous mode
[ 312.174520][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 312.193269][ T9476] bond0: (slave bond_slave_0): Releasing backup interface
[ 312.228613][ T9476] bond0: (slave bond_slave_1): Releasing backup interface
[ 312.302230][ T9476] team0: Port device team_slave_0 removed
[ 312.350043][ T9476] team0: Port device team_slave_1 removed
[ 312.360567][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 312.368542][ T9476] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 312.382734][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 312.390763][ T9476] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:34 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:34 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 82)
08:44:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001300270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:34 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40002, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:34 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa96f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:34 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 312.512660][ T9481] loop4: detected capacity change from 0 to 512
[ 312.514033][ T9482] loop1: detected capacity change from 0 to 84
[ 312.526904][ T9483] loop2: detected capacity change from 0 to 512
[ 312.533925][ T9483] FAULT_INJECTION: forcing a failure.
[ 312.533925][ T9483] name failslab, interval 1, probability 0, space 0, times 0
[ 312.546549][ T9483] CPU: 1 PID: 9483 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 312.555249][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 312.559772][ T9481] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 312.565314][ T9483] Call Trace:
[ 312.565323][ T9483]
[ 312.565329][ T9483] dump_stack_lvl+0xd6/0x122
[ 312.565355][ T9483] dump_stack+0x11/0x1b
[ 312.565372][ T9483] should_fail+0x23c/0x250
[ 312.592772][ T9483] ? __list_lru_init+0x70/0x6d0
[ 312.597615][ T9483] __should_failslab+0x81/0x90
[ 312.602412][ T9483] should_failslab+0x5/0x20
[ 312.607117][ T9483] __kmalloc+0x6f/0x370
[ 312.611254][ T9483] ? __list_lru_init+0x352/0x6d0
[ 312.616261][ T9483] __list_lru_init+0x70/0x6d0
[ 312.620922][ T9483] alloc_super+0x4bf/0x520
[ 312.625333][ T9483] ? mount_bdev+0x290/0x290
[ 312.629845][ T9483] sget+0x189/0x370
[ 312.633632][ T9483] ? test_bdev_super+0x30/0x30
[ 312.638379][ T9483] mount_bdev+0xd3/0x290
[ 312.642607][ T9483] ? ext4_mount+0x40/0x40
[ 312.646951][ T9483] ? ext4_errno_to_code+0x110/0x110
[ 312.652141][ T9483] ext4_mount+0x2d/0x40
[ 312.656360][ T9483] legacy_get_tree+0x70/0xc0
[ 312.660931][ T9483] vfs_get_tree+0x4a/0x1a0
[ 312.665336][ T9483] path_mount+0x11cf/0x1c40
[ 312.669887][ T9483] ? kmem_cache_free+0x65/0x110
[ 312.674723][ T9483] __se_sys_mount+0x24b/0x2f0
[ 312.679425][ T9483] __x64_sys_mount+0x63/0x70
[ 312.683999][ T9483] do_syscall_64+0x44/0xd0
[ 312.688401][ T9483] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 312.694356][ T9483] RIP: 0033:0x7fd1bff5001a
[ 312.698755][ T9483] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 312.718406][ T9483] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 312.726973][ T9483] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 312.734950][ T9483] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 312.742905][ T9483] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 312.750897][ T9483] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 312.758852][ T9483] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 312.766806][ T9483]
08:44:34 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 312.835786][ T9482] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 312.847643][ T9484] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
08:44:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001400270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001500270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:34 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, 0x0}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 312.904889][ T9482] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:34 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 83)
[ 312.965302][ T9482] loop1: detected capacity change from 0 to 84
[ 313.005571][ T9482] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 313.026377][ T9493] loop2: detected capacity change from 0 to 512
[ 313.028178][ T9482] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 313.051073][ T9493] FAULT_INJECTION: forcing a failure.
[ 313.051073][ T9493] name failslab, interval 1, probability 0, space 0, times 0
[ 313.064736][ T9493] CPU: 0 PID: 9493 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 313.073498][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 313.083638][ T9493] Call Trace:
[ 313.086907][ T9493]
[ 313.089831][ T9493] dump_stack_lvl+0xd6/0x122
[ 313.094510][ T9493] dump_stack+0x11/0x1b
[ 313.098663][ T9493] should_fail+0x23c/0x250
[ 313.103081][ T9493] __should_failslab+0x81/0x90
[ 313.107853][ T9493] should_failslab+0x5/0x20
[ 313.112515][ T9493] kmem_cache_alloc_node_trace+0x61/0x310
[ 313.118231][ T9493] ? should_fail+0xd6/0x250
[ 313.122725][ T9493] ? __kmalloc_node+0x30/0x40
[ 313.127442][ T9493] __kmalloc_node+0x30/0x40
[ 313.131962][ T9493] kvmalloc_node+0x81/0x110
[ 313.136493][ T9493] __list_lru_init+0x2f7/0x6d0
[ 313.141248][ T9493] alloc_super+0x4bf/0x520
[ 313.145755][ T9493] ? mount_bdev+0x290/0x290
[ 313.150263][ T9493] sget+0x189/0x370
[ 313.154064][ T9493] ? test_bdev_super+0x30/0x30
[ 313.158833][ T9493] mount_bdev+0xd3/0x290
[ 313.163156][ T9493] ? ext4_mount+0x40/0x40
[ 313.167631][ T9493] ? ext4_errno_to_code+0x110/0x110
[ 313.172825][ T9493] ext4_mount+0x2d/0x40
[ 313.177091][ T9493] legacy_get_tree+0x70/0xc0
[ 313.181787][ T9493] vfs_get_tree+0x4a/0x1a0
[ 313.186205][ T9493] path_mount+0x11cf/0x1c40
[ 313.190706][ T9493] ? kmem_cache_free+0x65/0x110
[ 313.195617][ T9493] __se_sys_mount+0x24b/0x2f0
[ 313.200299][ T9493] __x64_sys_mount+0x63/0x70
08:44:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001600270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 313.204895][ T9493] do_syscall_64+0x44/0xd0
[ 313.209312][ T9493] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 313.215211][ T9493] RIP: 0033:0x7fd1bff5001a
[ 313.219652][ T9493] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 313.239369][ T9493] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 313.247786][ T9493] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
08:44:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001800270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 313.255860][ T9493] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 313.263845][ T9493] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 313.272172][ T9493] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 313.280150][ T9493] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 313.288124][ T9493]
08:44:34 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa970, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 313.327061][ T9481] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:34 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40003, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001900270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 313.390685][ T9503] loop1: detected capacity change from 0 to 84
[ 313.427627][ T9503] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001a00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 313.445877][ T9508] loop4: detected capacity change from 0 to 512
[ 313.452310][ T9503] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 313.469620][ T9508] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 313.494111][ T9508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 313.518366][ T9503] loop1: detected capacity change from 0 to 84
[ 313.530149][ T9503] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 313.570946][ T9503] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 313.836588][ T2005] device hsr_slave_0 left promiscuous mode
[ 313.846034][ T2005] device hsr_slave_1 left promiscuous mode
[ 313.867359][ T2005] device veth1_macvtap left promiscuous mode
[ 313.873395][ T2005] device veth0_macvtap left promiscuous mode
[ 313.879429][ T2005] device veth1_vlan left promiscuous mode
[ 313.885171][ T2005] device veth0_vlan left promiscuous mode
[ 314.134155][ T2005] bond0 (unregistering): Released all slaves
[ 315.017987][ T9514] chnl_net:caif_netlink_parms(): no params data found
[ 315.053414][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 315.060498][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state
[ 315.069089][ T9514] device bridge_slave_0 entered promiscuous mode
[ 315.076366][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 315.083437][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state
[ 315.092428][ T9514] device bridge_slave_1 entered promiscuous mode
[ 315.111856][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 315.122076][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 315.141718][ T9514] team0: Port device team_slave_0 added
[ 315.149107][ T9514] team0: Port device team_slave_1 added
[ 315.164187][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 315.171231][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 315.197139][ T9514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 315.210771][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 315.217734][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 315.243631][ T9514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 315.267834][ T9514] device hsr_slave_0 entered promiscuous mode
[ 315.274344][ T9514] device hsr_slave_1 entered promiscuous mode
[ 315.457605][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 315.464757][ T9514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 315.472065][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 315.479100][ T9514] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 315.524103][ T9514] 8021q: adding VLAN 0 to HW filter on device bond0
[ 315.535810][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 315.547990][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 315.555886][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 315.567044][ T9514] 8021q: adding VLAN 0 to HW filter on device team0
[ 315.577043][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 315.585496][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 315.592519][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 315.608587][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 315.617277][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 315.625724][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 315.632740][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 315.640673][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 315.649533][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 315.658511][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 315.667277][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 315.675841][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 315.684162][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 315.695398][ T9514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 315.705755][ T9514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 315.725242][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 315.733284][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 315.741913][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 315.750441][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 315.758959][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 315.772741][ T9514] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 315.780267][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 315.788058][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 315.802557][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 315.886234][ T9529] chnl_net:caif_netlink_parms(): no params data found
[ 315.903329][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 315.919774][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 315.970594][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 315.977671][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 315.992116][ T9529] device bridge_slave_0 entered promiscuous mode
[ 316.000012][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state
[ 316.007114][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 316.015146][ T9529] device bridge_slave_1 entered promiscuous mode
[ 316.032427][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 316.040711][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 316.050023][ T9514] device veth0_vlan entered promiscuous mode
[ 316.063250][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 316.072986][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 316.080784][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 316.089679][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 316.100797][ T9514] device veth1_vlan entered promiscuous mode
[ 316.119304][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 316.130141][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 316.139015][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 316.148899][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 316.159946][ T9514] device veth0_macvtap entered promiscuous mode
[ 316.174005][ T9529] team0: Port device team_slave_0 added
[ 316.181066][ T9514] device veth1_macvtap entered promiscuous mode
[ 316.191272][ T9529] team0: Port device team_slave_1 added
[ 316.201287][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 316.211752][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.221614][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 316.232045][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.241934][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 316.252518][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.262526][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 316.272953][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.283775][ T9514] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 316.302223][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 316.310303][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 316.319119][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 316.328736][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 316.337958][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 316.348497][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.358325][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 316.368814][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.378641][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 316.389052][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.398872][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 316.409292][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 316.422035][ T9514] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 316.429481][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 316.436508][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 316.462484][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 316.477588][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 316.486196][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 316.496831][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 316.503765][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 316.529863][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 316.557424][ T9529] device hsr_slave_0 entered promiscuous mode
[ 316.563996][ T9529] device hsr_slave_1 entered promiscuous mode
[ 316.570476][ T9529] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 316.579137][ T9529] Cannot create hsr debugfs directory
[ 316.648233][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 316.668389][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 316.676978][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 316.694419][ T9557] device bridge_slave_0 left promiscuous mode
[ 316.701199][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state
[ 316.716628][ T9557] device bridge_slave_1 left promiscuous mode
[ 316.723388][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state
[ 316.741940][ T9557] bond0: (slave bond_slave_0): Releasing backup interface
[ 316.777741][ T9557] bond0: (slave bond_slave_1): Releasing backup interface
[ 316.852080][ T9557] team0: Port device team_slave_0 removed
[ 316.900279][ T9557] team0: Port device team_slave_1 removed
[ 316.910806][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 316.918746][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 316.932257][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 316.940167][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff})
r1 = dup(r0)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0a19c5b904009250ab01d95d74539d0100dd661665da"], 0x16)
r4 = socket$netlink(0x10, 0x3, 0x4)
fcntl$getown(r3, 0x9)
write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfef0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000003, 0x10150, r5, 0xff113000)
08:44:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001c00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:38 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40004, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:38 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa971, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 317.047982][ T9562] loop4: detected capacity change from 0 to 512
[ 317.047973][ T9563] loop1: detected capacity change from 0 to 84
[ 317.064646][ T9563] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 317.065043][ T9562] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 317.073050][ T9563] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 317.093683][ T9562] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 317.138253][ T9563] loop1: detected capacity change from 0 to 84
[ 317.145817][ T9560] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 317.146111][ T9563] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 317.166902][ T9563] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 317.183630][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0
[ 317.210358][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 317.227016][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 317.239651][ T9529] 8021q: adding VLAN 0 to HW filter on device team0
[ 317.262125][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 317.272232][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 317.280726][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 317.287760][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 317.305206][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 317.313136][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 317.322699][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 317.330961][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 317.337989][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 317.345930][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 317.355128][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 317.363933][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 317.372805][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 317.381730][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 317.390468][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 317.398962][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 317.407314][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 317.417548][ T9529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 317.430595][ T9529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 317.441039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 317.449381][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 317.457795][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 317.471913][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 317.481552][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 317.489312][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 317.550245][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 317.618676][ T9529] device veth0_vlan entered promiscuous mode
[ 317.626987][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 317.635566][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 317.646558][ T9529] device veth1_vlan entered promiscuous mode
[ 317.656099][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 317.664026][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 317.671990][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 317.681429][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 317.696239][ T9529] device veth0_macvtap entered promiscuous mode
[ 317.708183][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 317.717754][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 317.726724][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 317.735725][ T9529] device veth1_macvtap entered promiscuous mode
[ 317.750822][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 317.761284][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.771226][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 317.781661][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.791485][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 317.801941][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.811751][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 317.822174][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.835461][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 317.846811][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 317.854824][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 317.863193][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 317.872502][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 317.882967][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.892827][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 317.903259][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.913170][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 317.923575][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.933421][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 317.943843][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 317.956449][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 317.967815][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 317.976260][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 318.053518][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 318.075293][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 318.083747][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 318.103704][ T9580] device bridge_slave_0 left promiscuous mode
[ 318.110580][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 318.126516][ T9580] device bridge_slave_1 left promiscuous mode
[ 318.133246][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 318.152071][ T9580] bond0: (slave bond_slave_0): Releasing backup interface
[ 318.186703][ T9580] bond0: (slave bond_slave_1): Releasing backup interface
[ 318.264213][ T9580] team0: Port device team_slave_0 removed
[ 318.314323][ T9580] team0: Port device team_slave_1 removed
[ 318.324949][ T9580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 318.332798][ T9580] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 318.346609][ T9580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 318.354440][ T9580] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:39 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, 0x0}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:39 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 84)
08:44:39 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40005, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:39 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
set_mempolicy(0x1, &(0x7f0000000240)=0x7, 0x8)
shutdown(r0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @empty, 0xb}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0x8)
08:44:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001d00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:40 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa972, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 318.436683][ T9583] loop4: detected capacity change from 0 to 512
[ 318.445136][ T9587] loop1: detected capacity change from 0 to 84
[ 318.447465][ T9588] loop2: detected capacity change from 0 to 512
[ 318.457924][ T8] device hsr_slave_0 left promiscuous mode
[ 318.457980][ T9583] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 318.458106][ T9587] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 318.480270][ T8] device hsr_slave_1 left promiscuous mode
[ 318.487993][ T9588] FAULT_INJECTION: forcing a failure.
[ 318.487993][ T9588] name failslab, interval 1, probability 0, space 0, times 0
[ 318.500686][ T9588] CPU: 0 PID: 9588 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 318.509364][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 318.519409][ T9588] Call Trace:
[ 318.522769][ T9588]
[ 318.525696][ T9588] dump_stack_lvl+0xd6/0x122
[ 318.530323][ T9588] dump_stack+0x11/0x1b
[ 318.534503][ T9588] should_fail+0x23c/0x250
[ 318.538910][ T9588] ? __list_lru_init+0x352/0x6d0
[ 318.543983][ T9588] __should_failslab+0x81/0x90
[ 318.548941][ T9588] should_failslab+0x5/0x20
[ 318.553447][ T9588] kmem_cache_alloc_trace+0x52/0x350
[ 318.558729][ T9588] ? __kmalloc_node+0x30/0x40
[ 318.563404][ T9588] __list_lru_init+0x352/0x6d0
[ 318.568163][ T9588] alloc_super+0x4bf/0x520
[ 318.572658][ T9588] ? mount_bdev+0x290/0x290
[ 318.577197][ T9588] sget+0x189/0x370
[ 318.581022][ T9588] ? test_bdev_super+0x30/0x30
[ 318.585785][ T9588] mount_bdev+0xd3/0x290
[ 318.590092][ T9588] ? ext4_mount+0x40/0x40
[ 318.594416][ T9588] ? ext4_errno_to_code+0x110/0x110
[ 318.599612][ T9588] ext4_mount+0x2d/0x40
[ 318.603764][ T9588] legacy_get_tree+0x70/0xc0
[ 318.608347][ T9588] vfs_get_tree+0x4a/0x1a0
[ 318.612759][ T9588] path_mount+0x11cf/0x1c40
[ 318.617253][ T9588] ? kmem_cache_free+0x65/0x110
[ 318.622173][ T9588] __se_sys_mount+0x24b/0x2f0
[ 318.626916][ T9588] __x64_sys_mount+0x63/0x70
[ 318.631540][ T9588] do_syscall_64+0x44/0xd0
[ 318.635952][ T9588] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 318.641838][ T9588] RIP: 0033:0x7fd1bff5001a
[ 318.646242][ T9588] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 318.665933][ T9588] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 318.674342][ T9588] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 318.682307][ T9588] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 318.690270][ T9588] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 318.698334][ T9588] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 318.706300][ T9588] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 318.715529][ T9588]
[ 318.722648][ T9587] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 318.735882][ T8] device veth1_macvtap left promiscuous mode
[ 318.741924][ T8] device veth0_macvtap left promiscuous mode
[ 318.745631][ T9583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 318.748168][ T8] device veth1_vlan left promiscuous mode
[ 318.764263][ T8] device veth0_vlan left promiscuous mode
08:44:40 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 85)
08:44:40 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40006, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 318.798612][ T9587] loop1: detected capacity change from 0 to 84
[ 318.814203][ T9587] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 318.875562][ T9587] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 318.887158][ T9594] loop4: detected capacity change from 0 to 512
[ 318.915997][ T9592] loop2: detected capacity change from 0 to 512
[ 318.923014][ T9594] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 318.936477][ T9592] FAULT_INJECTION: forcing a failure.
[ 318.936477][ T9592] name failslab, interval 1, probability 0, space 0, times 0
[ 318.949157][ T9592] CPU: 1 PID: 9592 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 318.957833][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 318.967979][ T9592] Call Trace:
[ 318.971261][ T9592]
[ 318.974264][ T9592] dump_stack_lvl+0xd6/0x122
[ 318.978928][ T9592] dump_stack+0x11/0x1b
[ 318.983088][ T9592] should_fail+0x23c/0x250
[ 318.987856][ T9592] ? __list_lru_init+0x352/0x6d0
[ 318.992803][ T9592] __should_failslab+0x81/0x90
[ 318.997635][ T9592] should_failslab+0x5/0x20
[ 319.002203][ T9592] kmem_cache_alloc_trace+0x52/0x350
[ 319.007503][ T9592] ? __list_lru_init+0x352/0x6d0
[ 319.012443][ T9592] __list_lru_init+0x352/0x6d0
[ 319.017360][ T9592] alloc_super+0x4bf/0x520
[ 319.021775][ T9592] ? mount_bdev+0x290/0x290
[ 319.026283][ T9592] sget+0x189/0x370
[ 319.030093][ T9592] ? test_bdev_super+0x30/0x30
[ 319.034868][ T9592] mount_bdev+0xd3/0x290
[ 319.039189][ T9592] ? ext4_mount+0x40/0x40
[ 319.043524][ T9592] ? ext4_errno_to_code+0x110/0x110
[ 319.048722][ T9592] ext4_mount+0x2d/0x40
[ 319.052946][ T9592] legacy_get_tree+0x70/0xc0
[ 319.057534][ T9592] vfs_get_tree+0x4a/0x1a0
[ 319.061978][ T9592] path_mount+0x11cf/0x1c40
[ 319.066479][ T9592] ? kmem_cache_free+0x65/0x110
[ 319.071342][ T9592] __se_sys_mount+0x24b/0x2f0
[ 319.076025][ T9592] __x64_sys_mount+0x63/0x70
[ 319.080643][ T9592] do_syscall_64+0x44/0xd0
[ 319.085072][ T9592] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 319.090970][ T9592] RIP: 0033:0x7fd1bff5001a
[ 319.095477][ T9592] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 319.115168][ T9592] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 319.123650][ T9592] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 319.131718][ T9592] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 319.139710][ T9592] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 319.147742][ T9592] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 319.155754][ T9592] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 319.163732][ T9592]
08:44:40 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa980, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 319.180048][ T9594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:40 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40007, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 319.232788][ T9597] loop1: detected capacity change from 0 to 84
[ 319.255701][ T9597] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 319.269829][ T9597] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:40 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 86)
[ 319.293606][ T9601] loop4: detected capacity change from 0 to 512
[ 319.306147][ T9601] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 319.316684][ T9597] loop1: detected capacity change from 0 to 84
[ 319.325216][ T9597] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 319.343597][ T9597] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 319.355995][ T9601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:41 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40008, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 319.400426][ T9604] loop2: detected capacity change from 0 to 512
[ 319.414093][ T8] bond0 (unregistering): Released all slaves
[ 319.465159][ T9604] FAULT_INJECTION: forcing a failure.
[ 319.465159][ T9604] name failslab, interval 1, probability 0, space 0, times 0
[ 319.477816][ T9604] CPU: 0 PID: 9604 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 319.486504][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 319.496661][ T9604] Call Trace:
[ 319.499944][ T9604]
[ 319.502874][ T9604] dump_stack_lvl+0xd6/0x122
[ 319.507496][ T9604] dump_stack+0x11/0x1b
[ 319.511661][ T9604] should_fail+0x23c/0x250
[ 319.516160][ T9604] ? __list_lru_init+0x352/0x6d0
[ 319.521173][ T9604] __should_failslab+0x81/0x90
[ 319.526039][ T9604] should_failslab+0x5/0x20
[ 319.530586][ T9604] kmem_cache_alloc_trace+0x52/0x350
[ 319.535879][ T9604] ? __list_lru_init+0x352/0x6d0
[ 319.540821][ T9604] __list_lru_init+0x352/0x6d0
[ 319.545662][ T9604] alloc_super+0x4bf/0x520
[ 319.550087][ T9604] ? mount_bdev+0x290/0x290
[ 319.554678][ T9604] sget+0x189/0x370
[ 319.558494][ T9604] ? test_bdev_super+0x30/0x30
[ 319.563266][ T9604] mount_bdev+0xd3/0x290
[ 319.567586][ T9604] ? ext4_mount+0x40/0x40
[ 319.571940][ T9604] ? ext4_errno_to_code+0x110/0x110
[ 319.577149][ T9604] ext4_mount+0x2d/0x40
[ 319.581332][ T9604] legacy_get_tree+0x70/0xc0
[ 319.585957][ T9604] vfs_get_tree+0x4a/0x1a0
[ 319.590442][ T9604] path_mount+0x11cf/0x1c40
[ 319.594949][ T9604] ? kmem_cache_free+0x65/0x110
[ 319.599901][ T9604] __se_sys_mount+0x24b/0x2f0
[ 319.604643][ T9604] __x64_sys_mount+0x63/0x70
[ 319.609278][ T9604] do_syscall_64+0x44/0xd0
[ 319.613705][ T9604] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 319.619651][ T9604] RIP: 0033:0x7fd1bff5001a
[ 319.624195][ T9604] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 319.643842][ T9604] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 319.652359][ T9604] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 319.660363][ T9604] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 319.668329][ T9604] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 319.676299][ T9604] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 319.684399][ T9604] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 319.692374][ T9604]
[ 319.707839][ T9606] loop4: detected capacity change from 0 to 512
[ 319.717234][ T9606] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 319.762414][ T9606] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:41 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, 0x0}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:41 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa9c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001e00270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 319.842222][ T9609] loop1: detected capacity change from 0 to 84
[ 319.865709][ T9609] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 319.874138][ T9611] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 319.888776][ T9609] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 319.947401][ T9609] loop1: detected capacity change from 0 to 84
[ 319.953959][ T9609] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 319.963832][ T9609] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 320.757093][ T8] device hsr_slave_0 left promiscuous mode
[ 320.765960][ T8] device hsr_slave_1 left promiscuous mode
[ 320.817122][ T8] device veth1_macvtap left promiscuous mode
[ 320.823125][ T8] device veth0_macvtap left promiscuous mode
[ 320.829150][ T8] device veth1_vlan left promiscuous mode
[ 320.834899][ T8] device veth0_vlan left promiscuous mode
[ 320.981639][ T8] bond0 (unregistering): Released all slaves
[ 321.107683][ T9614] chnl_net:caif_netlink_parms(): no params data found
[ 321.140914][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 321.148059][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 321.157110][ T9614] device bridge_slave_0 entered promiscuous mode
[ 321.164264][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 321.171348][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 321.179079][ T9614] device bridge_slave_1 entered promiscuous mode
[ 321.195827][ T9614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 321.206323][ T9614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 321.226351][ T9614] team0: Port device team_slave_0 added
[ 321.232812][ T9614] team0: Port device team_slave_1 added
[ 321.248192][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 321.255197][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 321.281751][ T9614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 321.294028][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 321.301001][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 321.326987][ T9614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 321.361059][ T9614] device hsr_slave_0 entered promiscuous mode
[ 321.367690][ T9614] device hsr_slave_1 entered promiscuous mode
[ 321.478748][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 321.486115][ T9614] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 321.493434][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 321.500469][ T9614] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 321.567780][ T9614] 8021q: adding VLAN 0 to HW filter on device bond0
[ 321.589280][ T9614] 8021q: adding VLAN 0 to HW filter on device team0
[ 321.600105][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 321.608358][ T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 321.616164][ T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 321.636922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 321.645289][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 321.652321][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 321.660261][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 321.669274][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 321.676308][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 321.685251][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 321.698944][ T9614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 321.709377][ T9614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 321.723364][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 321.731643][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 321.741335][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 321.749834][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 321.759438][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 321.773752][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 321.785549][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 321.792948][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 321.848291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 321.908806][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 321.917774][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 321.926503][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 321.935231][ T9614] device veth0_vlan entered promiscuous mode
[ 321.943644][ T9614] device veth1_vlan entered promiscuous mode
[ 321.955068][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 321.970351][ T9614] device veth0_macvtap entered promiscuous mode
[ 321.977876][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 321.986051][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 321.994444][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 322.003531][ T9614] device veth1_macvtap entered promiscuous mode
[ 322.014686][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 322.025132][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.034979][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 322.045392][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.055272][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 322.065788][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.075600][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 322.086009][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.098260][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 322.106279][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 322.116532][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 322.127045][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.136859][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 322.147266][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.157119][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 322.167523][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.177334][ T9614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 322.187874][ T9614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 322.199281][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 322.208043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 322.216873][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
08:44:43 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, 0x0}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:43 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 87)
08:44:43 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40009, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:43 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={0x0}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 322.256810][ T24] audit: type=1400 audit(1638348283.823:785): avc: denied { shutdown } for pid=9643 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
08:44:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00!\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:43 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaa00, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 322.302504][ T9649] loop2: detected capacity change from 0 to 512
[ 322.311043][ T9653] loop1: detected capacity change from 0 to 85
[ 322.311900][ T9654] loop4: detected capacity change from 0 to 512
[ 322.328803][ T9649] FAULT_INJECTION: forcing a failure.
[ 322.328803][ T9649] name failslab, interval 1, probability 0, space 0, times 0
[ 322.341538][ T9649] CPU: 1 PID: 9649 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 322.350381][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 322.360442][ T9649] Call Trace:
[ 322.363724][ T9649]
[ 322.366660][ T9649] dump_stack_lvl+0xd6/0x122
[ 322.371271][ T9649] dump_stack+0x11/0x1b
[ 322.372121][ T9654] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 322.375421][ T9649] should_fail+0x23c/0x250
[ 322.375445][ T9649] ? __list_lru_init+0x352/0x6d0
[ 322.392927][ T9649] __should_failslab+0x81/0x90
[ 322.397685][ T9649] should_failslab+0x5/0x20
[ 322.402274][ T9649] kmem_cache_alloc_trace+0x52/0x350
[ 322.407552][ T9649] ? __list_lru_init+0x352/0x6d0
[ 322.412490][ T9649] __list_lru_init+0x352/0x6d0
[ 322.417240][ T9649] alloc_super+0x4bf/0x520
[ 322.421650][ T9649] ? mount_bdev+0x290/0x290
[ 322.426138][ T9649] sget+0x189/0x370
[ 322.429929][ T9649] ? test_bdev_super+0x30/0x30
[ 322.434732][ T9649] mount_bdev+0xd3/0x290
[ 322.439092][ T9649] ? ext4_mount+0x40/0x40
[ 322.443424][ T9649] ? ext4_errno_to_code+0x110/0x110
[ 322.448636][ T9649] ext4_mount+0x2d/0x40
[ 322.452837][ T9649] legacy_get_tree+0x70/0xc0
[ 322.457409][ T9649] vfs_get_tree+0x4a/0x1a0
[ 322.461878][ T9649] path_mount+0x11cf/0x1c40
[ 322.466445][ T9649] ? kmem_cache_free+0x65/0x110
[ 322.471320][ T9649] __se_sys_mount+0x24b/0x2f0
[ 322.475985][ T9649] ? __this_cpu_preempt_check+0x18/0x20
[ 322.481577][ T9649] __x64_sys_mount+0x63/0x70
[ 322.486149][ T9649] do_syscall_64+0x44/0xd0
[ 322.490628][ T9649] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 322.496529][ T9649] RIP: 0033:0x7fd1bff5001a
[ 322.500924][ T9649] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 322.520560][ T9649] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 322.529066][ T9649] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 322.537027][ T9649] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 322.544992][ T9649] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
08:44:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00\"\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 322.552946][ T9649] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 322.560898][ T9649] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 322.568854][ T9649]
[ 322.582080][ T9653] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 322.592232][ T9654] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 322.663634][ T9653] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 322.696519][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:44:44 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000a, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 322.755851][ T9653] loop1: detected capacity change from 0 to 85
[ 322.769558][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 322.777875][ T9653] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:44 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 88)
[ 322.803352][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 322.822106][ T9653] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 322.828974][ T9661] loop2: detected capacity change from 0 to 512
[ 322.842649][ T9656] device bridge_slave_0 left promiscuous mode
[ 322.849470][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state
[ 322.860581][ T9661] FAULT_INJECTION: forcing a failure.
[ 322.860581][ T9661] name failslab, interval 1, probability 0, space 0, times 0
[ 322.860669][ T9663] loop4: detected capacity change from 0 to 512
[ 322.873245][ T9661] CPU: 0 PID: 9661 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 322.873270][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 322.873280][ T9661] Call Trace:
[ 322.901577][ T9661]
[ 322.904498][ T9661] dump_stack_lvl+0xd6/0x122
[ 322.909146][ T9661] dump_stack+0x11/0x1b
[ 322.913376][ T9661] should_fail+0x23c/0x250
[ 322.917786][ T9661] ? __list_lru_init+0x352/0x6d0
[ 322.922844][ T9661] __should_failslab+0x81/0x90
[ 322.927613][ T9661] should_failslab+0x5/0x20
[ 322.932148][ T9661] kmem_cache_alloc_trace+0x52/0x350
[ 322.937497][ T9661] ? __list_lru_init+0x352/0x6d0
[ 322.942419][ T9661] __list_lru_init+0x352/0x6d0
[ 322.947169][ T9661] alloc_super+0x4bf/0x520
[ 322.951567][ T9661] ? mount_bdev+0x290/0x290
[ 322.956098][ T9661] sget+0x189/0x370
[ 322.959893][ T9661] ? test_bdev_super+0x30/0x30
[ 322.964762][ T9661] mount_bdev+0xd3/0x290
[ 322.968989][ T9661] ? ext4_mount+0x40/0x40
[ 322.973306][ T9661] ? ext4_errno_to_code+0x110/0x110
[ 322.978577][ T9661] ext4_mount+0x2d/0x40
[ 322.982794][ T9661] legacy_get_tree+0x70/0xc0
[ 322.987371][ T9661] vfs_get_tree+0x4a/0x1a0
[ 322.991796][ T9661] path_mount+0x11cf/0x1c40
[ 322.996283][ T9661] ? kmem_cache_free+0x65/0x110
[ 323.001118][ T9661] __se_sys_mount+0x24b/0x2f0
[ 323.005778][ T9661] __x64_sys_mount+0x63/0x70
[ 323.010455][ T9661] do_syscall_64+0x44/0xd0
[ 323.014920][ T9661] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 323.020802][ T9661] RIP: 0033:0x7fd1bff5001a
[ 323.025250][ T9661] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 323.044921][ T9661] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 323.053357][ T9661] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 323.061362][ T9661] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 323.069315][ T9661] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 323.077270][ T9661] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 323.085337][ T9661] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 323.093294][ T9661]
[ 323.106402][ T9656] device bridge_slave_1 left promiscuous mode
[ 323.113202][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state
[ 323.130146][ T9656] bond0: (slave bond_slave_0): Releasing backup interface
[ 323.156640][ T9663] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 323.177509][ T9656] bond0: (slave bond_slave_1): Releasing backup interface
[ 323.205027][ T9663] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:44 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000b, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 323.284194][ T9656] team0: Port device team_slave_0 removed
[ 323.335596][ T9667] loop4: detected capacity change from 0 to 512
[ 323.356598][ T9667] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 323.370200][ T9656] team0: Port device team_slave_1 removed
[ 323.382150][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 323.390240][ T9656] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 323.399784][ T9667] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:45 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaa40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:45 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000c, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 323.428033][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 323.436083][ T9656] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 323.516067][ T9673] loop4: detected capacity change from 0 to 512
[ 323.546863][ T9674] loop1: detected capacity change from 0 to 85
[ 323.554565][ T9673] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:44:45 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, 0x0}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:45 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 89)
08:44:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 323.574729][ T9674] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 323.588427][ T9673] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 323.609142][ T9677] loop2: detected capacity change from 0 to 512
[ 323.619247][ T9677] FAULT_INJECTION: forcing a failure.
[ 323.619247][ T9677] name failslab, interval 1, probability 0, space 0, times 0
[ 323.631966][ T9677] CPU: 0 PID: 9677 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 323.640641][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 323.650783][ T9677] Call Trace:
[ 323.654148][ T9677]
[ 323.657081][ T9677] dump_stack_lvl+0xd6/0x122
[ 323.661682][ T9677] dump_stack+0x11/0x1b
[ 323.665909][ T9677] should_fail+0x23c/0x250
[ 323.670346][ T9677] ? __list_lru_init+0x352/0x6d0
[ 323.675283][ T9677] __should_failslab+0x81/0x90
[ 323.680125][ T9677] should_failslab+0x5/0x20
[ 323.684637][ T9677] kmem_cache_alloc_trace+0x52/0x350
[ 323.690014][ T9677] ? __list_lru_init+0x352/0x6d0
[ 323.694965][ T9677] __list_lru_init+0x352/0x6d0
[ 323.699730][ T9677] alloc_super+0x4bf/0x520
[ 323.704151][ T9677] ? mount_bdev+0x290/0x290
[ 323.708673][ T9677] sget+0x189/0x370
[ 323.712486][ T9677] ? test_bdev_super+0x30/0x30
[ 323.717249][ T9677] mount_bdev+0xd3/0x290
[ 323.721552][ T9677] ? ext4_mount+0x40/0x40
[ 323.726045][ T9677] ? ext4_errno_to_code+0x110/0x110
[ 323.731247][ T9677] ext4_mount+0x2d/0x40
[ 323.735423][ T9677] legacy_get_tree+0x70/0xc0
[ 323.740076][ T9677] vfs_get_tree+0x4a/0x1a0
[ 323.744500][ T9677] path_mount+0x11cf/0x1c40
[ 323.749095][ T9677] ? kmem_cache_free+0x65/0x110
[ 323.754179][ T9677] __se_sys_mount+0x24b/0x2f0
[ 323.758854][ T9677] __x64_sys_mount+0x63/0x70
[ 323.763433][ T9677] do_syscall_64+0x44/0xd0
[ 323.767849][ T9677] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 323.773770][ T9677] RIP: 0033:0x7fd1bff5001a
[ 323.778176][ T9677] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 323.797772][ T9677] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 323.806299][ T9677] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 323.813417][ T9674] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 323.814271][ T9677] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 323.814285][ T9677] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 323.814296][ T9677] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 323.847445][ T9677] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 323.855429][ T9677]
[ 323.889302][ T9674] loop1: detected capacity change from 0 to 85
[ 323.895883][ T9674] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 323.904176][ T9674] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 324.376098][ T8] device hsr_slave_0 left promiscuous mode
[ 324.385654][ T8] device hsr_slave_1 left promiscuous mode
[ 324.394399][ T8] device veth1_macvtap left promiscuous mode
[ 324.400494][ T8] device veth0_macvtap left promiscuous mode
[ 324.406492][ T8] device veth1_vlan left promiscuous mode
[ 324.412211][ T8] device veth0_vlan left promiscuous mode
[ 324.531232][ T8] bond0 (unregistering): Released all slaves
[ 324.937124][ T9683] chnl_net:caif_netlink_parms(): no params data found
[ 325.009076][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state
[ 325.016165][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state
[ 325.026264][ T9683] device bridge_slave_0 entered promiscuous mode
[ 325.033537][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state
[ 325.040593][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state
[ 325.049008][ T9683] device bridge_slave_1 entered promiscuous mode
[ 325.076616][ T9683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 325.095980][ T9683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 325.139292][ T9683] team0: Port device team_slave_0 added
[ 325.146748][ T9683] team0: Port device team_slave_1 added
[ 325.168528][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 325.175530][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 325.201453][ T9683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 325.214421][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 325.221408][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 325.247407][ T9683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 325.272827][ T9683] device hsr_slave_0 entered promiscuous mode
[ 325.279518][ T9683] device hsr_slave_1 entered promiscuous mode
[ 325.333861][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state
[ 325.340948][ T9683] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 325.348260][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state
[ 325.355290][ T9683] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 325.383856][ T9683] 8021q: adding VLAN 0 to HW filter on device bond0
[ 325.394514][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 325.402994][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 325.411060][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 325.422493][ T9683] 8021q: adding VLAN 0 to HW filter on device team0
[ 325.433870][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 325.442267][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 325.449319][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 325.466033][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 325.474267][ T77] bridge0: port 2(bridge_slave_1) entered blocking state
[ 325.481312][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 325.490056][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 325.498684][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 325.510203][ T9683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 325.520599][ T9683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 325.533491][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 325.542331][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 325.550956][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 325.564718][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 325.574571][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 325.582109][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 325.589797][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 325.636702][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 325.646183][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 325.702051][ T9683] device veth0_vlan entered promiscuous mode
[ 325.709710][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 325.718450][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 325.730088][ T9683] device veth1_vlan entered promiscuous mode
[ 325.739032][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 325.747718][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 325.755582][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 325.769804][ T9683] device veth0_macvtap entered promiscuous mode
[ 325.777646][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 325.785852][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 325.794365][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 325.805233][ T9683] device veth1_macvtap entered promiscuous mode
[ 325.814925][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 325.822967][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 325.831673][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 325.842116][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 325.851961][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 325.862371][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 325.872297][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 325.882741][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 325.892581][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 325.902986][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 325.915846][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 325.924185][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 325.932807][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 325.942021][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 325.952482][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 325.962333][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 325.972774][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 325.982666][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 325.993104][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 326.002912][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 326.013364][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 326.025130][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 326.032897][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 326.041658][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 326.106657][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 326.129706][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 326.138304][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 326.156574][ T9711] device bridge_slave_0 left promiscuous mode
[ 326.163191][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state
[ 326.178513][ T9711] device bridge_slave_1 left promiscuous mode
[ 326.185234][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state
[ 326.202916][ T9711] bond0: (slave bond_slave_0): Releasing backup interface
[ 326.239980][ T9711] bond0: (slave bond_slave_1): Releasing backup interface
[ 326.311302][ T9711] team0: Port device team_slave_0 removed
[ 326.363567][ T9711] team0: Port device team_slave_1 removed
[ 326.374508][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 326.382418][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 326.398818][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 326.406689][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={0x0}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:48 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00%\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:48 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, 0x0}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:48 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 90)
08:44:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00&\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:48 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaa80, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 326.487331][ T9716] loop4: detected capacity change from 0 to 512
[ 326.515377][ T9716] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 326.536034][ T9718] loop2: detected capacity change from 0 to 512
[ 326.545737][ T9718] FAULT_INJECTION: forcing a failure.
[ 326.545737][ T9718] name failslab, interval 1, probability 0, space 0, times 0
[ 326.558392][ T9718] CPU: 1 PID: 9718 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 326.567120][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 326.577172][ T9718] Call Trace:
[ 326.580452][ T9718]
[ 326.583383][ T9718] dump_stack_lvl+0xd6/0x122
[ 326.587982][ T9718] dump_stack+0x11/0x1b
[ 326.592141][ T9718] should_fail+0x23c/0x250
[ 326.596629][ T9718] ? __list_lru_init+0x352/0x6d0
[ 326.601571][ T9718] __should_failslab+0x81/0x90
[ 326.606384][ T9718] should_failslab+0x5/0x20
[ 326.610918][ T9718] kmem_cache_alloc_trace+0x52/0x350
[ 326.616209][ T9718] ? __list_lru_init+0x352/0x6d0
[ 326.621170][ T9718] __list_lru_init+0x352/0x6d0
[ 326.625967][ T9718] alloc_super+0x4bf/0x520
[ 326.628184][ T9722] loop1: detected capacity change from 0 to 85
[ 326.630391][ T9718] ? mount_bdev+0x290/0x290
[ 326.641029][ T9718] sget+0x189/0x370
[ 326.644906][ T9718] ? test_bdev_super+0x30/0x30
[ 326.649720][ T9718] mount_bdev+0xd3/0x290
[ 326.654026][ T9718] ? ext4_mount+0x40/0x40
[ 326.658363][ T9718] ? ext4_errno_to_code+0x110/0x110
[ 326.661324][ T9722] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 326.663563][ T9718] ext4_mount+0x2d/0x40
[ 326.663589][ T9718] legacy_get_tree+0x70/0xc0
[ 326.680419][ T9718] vfs_get_tree+0x4a/0x1a0
[ 326.684828][ T9718] path_mount+0x11cf/0x1c40
[ 326.689315][ T9718] ? kmem_cache_free+0x65/0x110
[ 326.694950][ T9718] __se_sys_mount+0x24b/0x2f0
[ 326.699613][ T9718] __x64_sys_mount+0x63/0x70
[ 326.704188][ T9718] do_syscall_64+0x44/0xd0
[ 326.708589][ T9718] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 326.714510][ T9718] RIP: 0033:0x7fd1bff5001a
[ 326.719027][ T9718] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 326.738800][ T9718] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 326.747283][ T9718] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 326.755243][ T9718] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 326.763196][ T9718] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 326.771217][ T9718] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 326.779239][ T9718] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 326.787196][ T9718]
08:44:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 326.824717][ T9722] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 326.847533][ T9716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={0x0}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:48 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 91)
[ 326.900944][ T9722] loop1: detected capacity change from 0 to 85
08:44:48 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 326.969101][ T9722] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:44:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00w\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 327.010293][ T9722] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 327.026775][ T9731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=9731 comm=syz-executor.5
08:44:48 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaac0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002802270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 327.055915][ T9733] loop4: detected capacity change from 0 to 512
[ 327.078538][ T9733] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 327.123681][ T9733] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 327.155766][ T9737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=552 sclass=netlink_route_socket pid=9737 comm=syz-executor.5
[ 327.173063][ T9739] loop1: detected capacity change from 0 to 85
08:44:48 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 327.205594][ T9739] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 327.235755][ T9739] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 327.274978][ T9743] loop4: detected capacity change from 0 to 512
[ 327.300182][ T9743] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 327.317249][ T9739] loop1: detected capacity change from 0 to 85
[ 327.333171][ T9743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 327.347504][ T9739] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 327.369064][ T9739] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 327.423396][ T9740] loop2: detected capacity change from 0 to 512
[ 327.433536][ T9740] FAULT_INJECTION: forcing a failure.
[ 327.433536][ T9740] name failslab, interval 1, probability 0, space 0, times 0
[ 327.446238][ T9740] CPU: 0 PID: 9740 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 327.454989][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 327.465055][ T9740] Call Trace:
[ 327.468336][ T9740]
[ 327.471257][ T9740] dump_stack_lvl+0xd6/0x122
[ 327.475849][ T9740] dump_stack+0x11/0x1b
[ 327.480004][ T9740] should_fail+0x23c/0x250
[ 327.484494][ T9740] ? __list_lru_init+0x352/0x6d0
[ 327.489466][ T9740] __should_failslab+0x81/0x90
[ 327.494282][ T9740] should_failslab+0x5/0x20
[ 327.498790][ T9740] kmem_cache_alloc_trace+0x52/0x350
[ 327.504086][ T9740] ? __list_lru_init+0x352/0x6d0
[ 327.509026][ T9740] __list_lru_init+0x352/0x6d0
[ 327.513819][ T9740] alloc_super+0x4bf/0x520
[ 327.518240][ T9740] ? mount_bdev+0x290/0x290
[ 327.522888][ T9740] sget+0x189/0x370
[ 327.526702][ T9740] ? test_bdev_super+0x30/0x30
[ 327.531475][ T9740] mount_bdev+0xd3/0x290
[ 327.535779][ T9740] ? ext4_mount+0x40/0x40
[ 327.540130][ T9740] ? ext4_errno_to_code+0x110/0x110
[ 327.545347][ T9740] ext4_mount+0x2d/0x40
[ 327.549508][ T9740] legacy_get_tree+0x70/0xc0
[ 327.554099][ T9740] vfs_get_tree+0x4a/0x1a0
[ 327.558514][ T9740] path_mount+0x11cf/0x1c40
[ 327.563023][ T9740] ? kmem_cache_free+0x65/0x110
[ 327.568156][ T9740] __se_sys_mount+0x24b/0x2f0
[ 327.572837][ T9740] __x64_sys_mount+0x63/0x70
[ 327.577428][ T9740] do_syscall_64+0x44/0xd0
[ 327.581871][ T9740] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 327.587918][ T9740] RIP: 0033:0x7fd1bff5001a
[ 327.592325][ T9740] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 327.611929][ T9740] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 327.620345][ T9740] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 327.628323][ T9740] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 327.636295][ T9740] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 327.644264][ T9740] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 327.652233][ T9740] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 327.660210][ T9740]
[ 327.676415][ T2005] device hsr_slave_0 left promiscuous mode
[ 327.686156][ T2005] device hsr_slave_1 left promiscuous mode
[ 327.703673][ T2005] device veth1_macvtap left promiscuous mode
[ 327.709743][ T2005] device veth0_macvtap left promiscuous mode
[ 327.715809][ T2005] device veth1_vlan left promiscuous mode
[ 327.721539][ T2005] device veth0_vlan left promiscuous mode
[ 327.975742][ T2005] bond0 (unregistering): Released all slaves
[ 328.675259][ T9746] chnl_net:caif_netlink_parms(): no params data found
[ 328.710073][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 328.717242][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 328.725900][ T9746] device bridge_slave_0 entered promiscuous mode
[ 328.733176][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 328.740243][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 328.751253][ T9746] device bridge_slave_1 entered promiscuous mode
[ 328.769576][ T9746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 328.780057][ T9746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 328.798827][ T9746] team0: Port device team_slave_0 added
[ 328.805528][ T9746] team0: Port device team_slave_1 added
[ 328.820342][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 328.827404][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 328.853285][ T9746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 328.864630][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 328.871729][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 328.897756][ T9746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 328.922156][ T9746] device hsr_slave_0 entered promiscuous mode
[ 328.930633][ T9746] device hsr_slave_1 entered promiscuous mode
[ 328.988341][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 328.995407][ T9746] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 329.002632][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 329.009683][ T9746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 329.038873][ T9746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 329.046903][ T1917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 329.054777][ T1917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 329.069684][ T9746] 8021q: adding VLAN 0 to HW filter on device team0
[ 329.077827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 329.085878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 329.103110][ T9746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 329.113505][ T9746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 329.128418][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 329.137636][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 329.146301][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 329.153311][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 329.161821][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 329.170959][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 329.179939][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 329.187065][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 329.196421][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 329.205372][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 329.214154][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 329.223619][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 329.232394][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 329.242047][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 329.250871][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 329.260352][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 329.268774][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 329.277365][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 329.291236][ T9746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 329.302228][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 329.310347][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 329.318455][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 329.326838][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 329.411990][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 329.426149][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 329.549995][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 329.558758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 329.568356][ T9746] device veth0_vlan entered promiscuous mode
[ 329.586337][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 329.593954][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 329.604002][ T9746] device veth1_vlan entered promiscuous mode
[ 329.612416][ T9764] chnl_net:caif_netlink_parms(): no params data found
[ 329.632607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 329.640820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 329.650055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 329.658442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 329.669538][ T9746] device veth0_macvtap entered promiscuous mode
[ 329.686314][ T9746] device veth1_macvtap entered promiscuous mode
[ 329.702549][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 329.713224][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.723054][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 329.733619][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.743514][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 329.753980][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.763804][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 329.774305][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.786856][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 329.801936][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 329.812459][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 329.820816][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 329.830416][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 329.843674][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state
[ 329.850779][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 329.858923][ T9764] device bridge_slave_0 entered promiscuous mode
[ 329.866584][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state
[ 329.873677][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 329.881626][ T9764] device bridge_slave_1 entered promiscuous mode
[ 329.889036][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 329.899490][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.909303][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 329.919768][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.929638][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 329.940134][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.949953][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 329.960369][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 329.971903][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 329.983623][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 329.992290][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 330.012050][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 330.023816][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 330.047428][ T9764] team0: Port device team_slave_0 added
[ 330.053772][ T9764] team0: Port device team_slave_1 added
[ 330.075760][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 330.083155][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 330.109345][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 330.121823][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 330.128831][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 330.154729][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 330.184557][ T9764] device hsr_slave_0 entered promiscuous mode
[ 330.191143][ T9764] device hsr_slave_1 entered promiscuous mode
[ 330.199314][ T9764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 330.207096][ T9764] Cannot create hsr debugfs directory
[ 330.236249][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 330.258496][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 330.267138][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 330.288030][ T9788] device bridge_slave_0 left promiscuous mode
[ 330.294795][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state
[ 330.310504][ T9788] device bridge_slave_1 left promiscuous mode
[ 330.317314][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state
[ 330.334512][ T9788] bond0: (slave bond_slave_0): Releasing backup interface
[ 330.373699][ T9788] bond0: (slave bond_slave_1): Releasing backup interface
[ 330.455095][ T9788] team0: Port device team_slave_0 removed
[ 330.509091][ T9788] team0: Port device team_slave_1 removed
[ 330.519220][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 330.527139][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 330.541876][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 330.549736][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:52 executing program 3:
set_mempolicy(0x1, 0x0, 0x200)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000080)={0xfff, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x2, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}]}, 0x190)
set_mempolicy(0x2, &(0x7f0000000240), 0x20)
r0 = socket$kcm(0xa, 0x6, 0x0)
set_mempolicy(0xc000, &(0x7f0000000040)=0x5, 0x1)
pipe(&(0x7f0000000580)={0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
08:44:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002803270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:52 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40010, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:52 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xab00, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:52 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 92)
[ 330.669040][ T9791] loop1: detected capacity change from 0 to 85
[ 330.678621][ T9794] loop2: detected capacity change from 0 to 512
[ 330.685506][ T9795] loop4: detected capacity change from 0 to 512
[ 330.692773][ T9797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=808 sclass=netlink_route_socket pid=9797 comm=syz-executor.5
[ 330.705885][ T9795] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 330.707608][ T9794] FAULT_INJECTION: forcing a failure.
[ 330.707608][ T9794] name failslab, interval 1, probability 0, space 0, times 0
[ 330.726658][ T9794] CPU: 0 PID: 9794 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 330.735435][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 330.745490][ T9794] Call Trace:
[ 330.748772][ T9794]
[ 330.751834][ T9794] dump_stack_lvl+0xd6/0x122
[ 330.756436][ T9794] dump_stack+0x11/0x1b
[ 330.760626][ T9794] should_fail+0x23c/0x250
[ 330.765126][ T9794] ? __list_lru_init+0x352/0x6d0
[ 330.770060][ T9794] __should_failslab+0x81/0x90
[ 330.774935][ T9794] should_failslab+0x5/0x20
[ 330.779440][ T9794] kmem_cache_alloc_trace+0x52/0x350
[ 330.784752][ T9794] ? __list_lru_init+0x352/0x6d0
[ 330.789694][ T9794] __list_lru_init+0x352/0x6d0
[ 330.794521][ T9794] alloc_super+0x4bf/0x520
[ 330.798935][ T9794] ? mount_bdev+0x290/0x290
[ 330.803511][ T9794] sget+0x189/0x370
[ 330.807416][ T9794] ? test_bdev_super+0x30/0x30
[ 330.812182][ T9794] mount_bdev+0xd3/0x290
[ 330.816424][ T9794] ? ext4_mount+0x40/0x40
[ 330.820775][ T9794] ? ext4_errno_to_code+0x110/0x110
[ 330.826058][ T9794] ext4_mount+0x2d/0x40
[ 330.830234][ T9794] legacy_get_tree+0x70/0xc0
[ 330.834822][ T9794] vfs_get_tree+0x4a/0x1a0
[ 330.839312][ T9794] path_mount+0x11cf/0x1c40
[ 330.843811][ T9794] ? kmem_cache_free+0x65/0x110
[ 330.848696][ T9794] __se_sys_mount+0x24b/0x2f0
[ 330.853372][ T9794] __x64_sys_mount+0x63/0x70
[ 330.857971][ T9794] do_syscall_64+0x44/0xd0
[ 330.862493][ T9794] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 330.868443][ T9794] RIP: 0033:0x7fd1bff5001a
[ 330.872878][ T9794] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 330.893052][ T9794] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 330.901813][ T9794] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 330.909801][ T9794] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 330.917796][ T9794] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 330.925836][ T9794] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 330.934050][ T9794] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 330.942020][ T9794]
[ 330.954945][ T9795] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 330.967319][ T9791] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 331.011903][ T9791] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 331.050904][ T9764] 8021q: adding VLAN 0 to HW filter on device bond0
[ 331.060169][ T9791] loop1: detected capacity change from 0 to 85
[ 331.074732][ T9791] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 331.094122][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 331.101568][ T9791] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 331.102541][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 331.134121][ T9764] 8021q: adding VLAN 0 to HW filter on device team0
[ 331.154813][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 331.163272][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 331.172039][ T77] bridge0: port 1(bridge_slave_0) entered blocking state
[ 331.179166][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 331.197696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 331.205767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 331.214130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 331.222804][ T5] bridge0: port 2(bridge_slave_1) entered blocking state
[ 331.229845][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 331.237833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 331.246705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 331.255551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 331.264102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 331.272880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 331.281592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 331.290142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 331.298550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 331.308653][ T9764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 331.321471][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 331.329214][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 331.337365][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 331.345861][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 331.363905][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 331.373643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 331.382404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 331.443852][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 331.452584][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 331.510100][ T9764] device veth0_vlan entered promiscuous mode
[ 331.519958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 331.528518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 331.544267][ T9764] device veth1_vlan entered promiscuous mode
[ 331.551116][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 331.559068][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 331.566862][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 331.581461][ T9764] device veth0_macvtap entered promiscuous mode
[ 331.589660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 331.597885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 331.607635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 331.621332][ T9764] device veth1_macvtap entered promiscuous mode
[ 331.629642][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 331.637919][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 331.650385][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 331.660975][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.670928][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 331.681374][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.691188][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 331.701611][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.711419][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 331.721853][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.735018][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 331.746590][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 331.755391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 331.769699][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 331.780206][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.790083][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 331.800552][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.810391][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 331.820909][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.830733][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 331.841326][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 331.854554][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 331.870623][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 331.879312][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 331.946956][ T9815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 331.967224][ T9815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 331.976671][ T9815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 331.993960][ T9815] device bridge_slave_0 left promiscuous mode
[ 332.001129][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state
[ 332.017821][ T9815] device bridge_slave_1 left promiscuous mode
[ 332.024490][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state
[ 332.043693][ T9815] bond0: (slave bond_slave_0): Releasing backup interface
[ 332.080681][ T9815] bond0: (slave bond_slave_1): Releasing backup interface
[ 332.162541][ T9815] team0: Port device team_slave_0 removed
[ 332.213028][ T9815] team0: Port device team_slave_1 removed
[ 332.223638][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 332.231328][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 332.244819][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 332.252498][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1
08:44:53 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002804270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:53 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40011, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:53 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 93)
08:44:53 executing program 3:
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="9a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0xa}, 0x1c)
08:44:53 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xab40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 332.301949][ T9815] syz-executor.0 (9815) used greatest stack depth: 9816 bytes left
[ 332.339835][ T9818] loop1: detected capacity change from 0 to 85
[ 332.349628][ T9821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1064 sclass=netlink_route_socket pid=9821 comm=syz-executor.5
[ 332.359588][ T9823] loop2: detected capacity change from 0 to 512
[ 332.363219][ T9822] loop4: detected capacity change from 0 to 512
[ 332.377801][ T2005] device hsr_slave_0 left promiscuous mode
[ 332.396315][ T9823] FAULT_INJECTION: forcing a failure.
[ 332.396315][ T9823] name failslab, interval 1, probability 0, space 0, times 0
[ 332.398629][ T9818] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 332.408999][ T9823] CPU: 1 PID: 9823 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 332.425796][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 332.436014][ T9823] Call Trace:
[ 332.439287][ T9823]
[ 332.442222][ T9823] dump_stack_lvl+0xd6/0x122
[ 332.446809][ T9823] dump_stack+0x11/0x1b
[ 332.451006][ T9823] should_fail+0x23c/0x250
[ 332.455414][ T9823] ? __list_lru_init+0x352/0x6d0
[ 332.460410][ T9823] __should_failslab+0x81/0x90
[ 332.465170][ T9823] should_failslab+0x5/0x20
[ 332.469700][ T9823] kmem_cache_alloc_trace+0x52/0x350
[ 332.474986][ T9823] ? __list_lru_init+0x352/0x6d0
[ 332.479906][ T9823] __list_lru_init+0x352/0x6d0
[ 332.484661][ T9823] alloc_super+0x4bf/0x520
[ 332.489146][ T9823] ? mount_bdev+0x290/0x290
[ 332.493711][ T9823] sget+0x189/0x370
[ 332.497514][ T9823] ? test_bdev_super+0x30/0x30
[ 332.502274][ T9823] mount_bdev+0xd3/0x290
[ 332.506581][ T9823] ? ext4_mount+0x40/0x40
[ 332.510897][ T9823] ? ext4_errno_to_code+0x110/0x110
[ 332.516083][ T9823] ext4_mount+0x2d/0x40
[ 332.520224][ T9823] legacy_get_tree+0x70/0xc0
[ 332.524797][ T9823] vfs_get_tree+0x4a/0x1a0
[ 332.529207][ T9823] path_mount+0x11cf/0x1c40
[ 332.533694][ T9823] ? kmem_cache_free+0x65/0x110
[ 332.538631][ T9823] __se_sys_mount+0x24b/0x2f0
[ 332.543293][ T9823] __x64_sys_mount+0x63/0x70
[ 332.547933][ T9823] do_syscall_64+0x44/0xd0
[ 332.552398][ T9823] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 332.558368][ T9823] RIP: 0033:0x7fd1bff5001a
[ 332.562766][ T9823] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 332.582389][ T9823] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 332.590784][ T9823] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 332.598739][ T9823] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 332.606693][ T9823] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 332.614650][ T9823] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 332.622613][ T9823] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 332.630715][ T9823]
[ 332.636519][ T2005] device hsr_slave_1 left promiscuous mode
[ 332.643113][ T9822] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 332.662889][ T2005] device veth1_macvtap left promiscuous mode
[ 332.668953][ T2005] device veth0_macvtap left promiscuous mode
[ 332.675091][ T2005] device veth1_vlan left promiscuous mode
[ 332.680876][ T2005] device veth0_vlan left promiscuous mode
[ 332.702049][ T9822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002805270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:54 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 94)
[ 332.725071][ T9818] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 332.762776][ T9828] loop2: detected capacity change from 0 to 512
[ 332.765973][ T9829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1320 sclass=netlink_route_socket pid=9829 comm=syz-executor.5
[ 332.770215][ T9828] FAULT_INJECTION: forcing a failure.
[ 332.770215][ T9828] name failslab, interval 1, probability 0, space 0, times 0
[ 332.794922][ T9828] CPU: 0 PID: 9828 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 332.803874][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 332.813927][ T9828] Call Trace:
[ 332.817202][ T9828]
[ 332.820209][ T9828] dump_stack_lvl+0xd6/0x122
[ 332.824890][ T9828] dump_stack+0x11/0x1b
[ 332.829104][ T9828] should_fail+0x23c/0x250
[ 332.833505][ T9828] ? ext4_fill_super+0x3d/0x78f0
[ 332.838553][ T9828] __should_failslab+0x81/0x90
[ 332.843376][ T9828] should_failslab+0x5/0x20
[ 332.848053][ T9828] __kmalloc_track_caller+0x6d/0x370
[ 332.853322][ T9828] ? bdev_name+0x1e1/0x240
[ 332.857724][ T9828] kstrdup+0x31/0x70
[ 332.861616][ T9828] ext4_fill_super+0x3d/0x78f0
[ 332.866408][ T9828] ? vsnprintf+0xe8f/0xed0
[ 332.870810][ T9828] ? snprintf+0x83/0xb0
[ 332.874964][ T9828] ? set_blocksize+0x197/0x270
[ 332.879740][ T9828] mount_bdev+0x1e8/0x290
[ 332.884065][ T9828] ? ext4_mount+0x40/0x40
[ 332.888904][ T9828] ? ext4_errno_to_code+0x110/0x110
[ 332.894329][ T9828] ext4_mount+0x2d/0x40
[ 332.898469][ T9828] legacy_get_tree+0x70/0xc0
[ 332.903090][ T9828] vfs_get_tree+0x4a/0x1a0
[ 332.907505][ T9828] path_mount+0x11cf/0x1c40
[ 332.912032][ T9828] ? kmem_cache_free+0x65/0x110
[ 332.916879][ T9828] __se_sys_mount+0x24b/0x2f0
[ 332.921543][ T9828] __x64_sys_mount+0x63/0x70
[ 332.926129][ T9828] do_syscall_64+0x44/0xd0
[ 332.930555][ T9828] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 332.936492][ T9828] RIP: 0033:0x7fd1bff5001a
[ 332.940892][ T9828] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 332.960554][ T9828] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 332.968967][ T9828] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 332.976941][ T9828] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 332.985023][ T9828] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 332.992986][ T9828] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 333.000974][ T9828] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 333.008933][ T9828]
08:44:54 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40012, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002806270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 333.049698][ T9818] loop1: detected capacity change from 0 to 85
[ 333.072949][ T9818] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 333.091975][ T9832] loop4: detected capacity change from 0 to 512
08:44:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\a\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 333.104428][ T9834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1576 sclass=netlink_route_socket pid=9834 comm=syz-executor.5
[ 333.118531][ T9832] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 333.129502][ T9818] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 333.167869][ T9838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1832 sclass=netlink_route_socket pid=9838 comm=syz-executor.5
[ 333.181568][ T9832] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:54 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xab80, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 333.386815][ T9841] loop1: detected capacity change from 0 to 85
[ 333.405783][ T9841] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 333.416915][ T9841] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 333.429059][ T2005] bond0 (unregistering): Released all slaves
[ 333.497315][ T9841] loop1: detected capacity change from 0 to 85
08:44:55 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:55 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 95)
08:44:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\b\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:55 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40013, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 333.588322][ T9841] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 333.614760][ T9841] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 333.645810][ T9843] loop2: detected capacity change from 0 to 512
[ 333.653943][ T9846] loop4: detected capacity change from 0 to 512
[ 333.655562][ T9847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2088 sclass=netlink_route_socket pid=9847 comm=syz-executor.5
[ 333.674642][ T9843] FAULT_INJECTION: forcing a failure.
[ 333.674642][ T9843] name failslab, interval 1, probability 0, space 0, times 0
[ 333.687318][ T9843] CPU: 1 PID: 9843 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 333.696083][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 333.706193][ T9843] Call Trace:
[ 333.709531][ T9843]
[ 333.712518][ T9843] dump_stack_lvl+0xd6/0x122
[ 333.717111][ T9843] dump_stack+0x11/0x1b
[ 333.721275][ T9843] should_fail+0x23c/0x250
[ 333.725687][ T9843] ? ext4_fill_super+0x62/0x78f0
[ 333.730635][ T9843] __should_failslab+0x81/0x90
[ 333.735426][ T9843] should_failslab+0x5/0x20
[ 333.739932][ T9843] kmem_cache_alloc_trace+0x52/0x350
[ 333.745250][ T9843] ext4_fill_super+0x62/0x78f0
[ 333.748980][ T9846] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 333.750032][ T9843] ? vsnprintf+0xe8f/0xed0
[ 333.762679][ T9843] ? snprintf+0x83/0xb0
[ 333.766836][ T9843] ? set_blocksize+0x197/0x270
[ 333.771606][ T9843] mount_bdev+0x1e8/0x290
[ 333.776010][ T9843] ? ext4_mount+0x40/0x40
[ 333.780358][ T9843] ? ext4_errno_to_code+0x110/0x110
[ 333.785573][ T9843] ext4_mount+0x2d/0x40
[ 333.789807][ T9843] legacy_get_tree+0x70/0xc0
[ 333.794491][ T9843] vfs_get_tree+0x4a/0x1a0
[ 333.798894][ T9843] path_mount+0x11cf/0x1c40
[ 333.803435][ T9843] ? kmem_cache_free+0x65/0x110
[ 333.808272][ T9843] __se_sys_mount+0x24b/0x2f0
[ 333.812936][ T9843] ? __this_cpu_preempt_check+0x18/0x20
[ 333.818498][ T9843] __x64_sys_mount+0x63/0x70
[ 333.823085][ T9843] do_syscall_64+0x44/0xd0
[ 333.827487][ T9843] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 333.833432][ T9843] RIP: 0033:0x7fd1bff5001a
[ 333.837891][ T9843] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 333.857480][ T9843] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 333.865882][ T9843] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 333.873840][ T9843] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 333.881793][ T9843] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 333.889749][ T9843] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 333.897703][ T9843] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 333.905674][ T9843]
[ 333.916585][ T9846] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 334.778188][ T2005] device hsr_slave_0 left promiscuous mode
[ 334.794899][ T2005] device hsr_slave_1 left promiscuous mode
[ 334.803208][ T2005] device veth1_macvtap left promiscuous mode
[ 334.809232][ T2005] device veth0_macvtap left promiscuous mode
[ 334.815255][ T2005] device veth1_vlan left promiscuous mode
[ 334.820982][ T2005] device veth0_vlan left promiscuous mode
[ 334.955245][ T2005] bond0 (unregistering): Released all slaves
[ 335.083585][ T9851] chnl_net:caif_netlink_parms(): no params data found
[ 335.120951][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state
[ 335.128514][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state
[ 335.136345][ T9851] device bridge_slave_0 entered promiscuous mode
[ 335.143617][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state
[ 335.150727][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state
[ 335.158548][ T9851] device bridge_slave_1 entered promiscuous mode
[ 335.176025][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 335.186255][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 335.207071][ T9851] team0: Port device team_slave_0 added
[ 335.213652][ T9851] team0: Port device team_slave_1 added
[ 335.245372][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 335.252337][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 335.278323][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 335.290917][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 335.297971][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 335.323888][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 335.358966][ T9851] device hsr_slave_0 entered promiscuous mode
[ 335.365874][ T9851] device hsr_slave_1 entered promiscuous mode
[ 335.456832][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state
[ 335.463958][ T9851] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 335.471380][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state
[ 335.478481][ T9851] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 335.508837][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0
[ 335.519492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 335.527929][ T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 335.536355][ T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 335.548780][ T9851] 8021q: adding VLAN 0 to HW filter on device team0
[ 335.558674][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 335.567382][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 335.574412][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 335.593299][ T9851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 335.603772][ T9851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 335.618125][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 335.626645][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 335.633669][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 335.642624][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 335.651399][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 335.660199][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 335.668900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 335.682798][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 335.691847][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 335.700192][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 335.708041][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 335.715738][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 335.762265][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 335.770962][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 335.828459][ T9851] device veth0_vlan entered promiscuous mode
[ 335.836502][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 335.845086][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 335.855516][ T9851] device veth1_vlan entered promiscuous mode
[ 335.864756][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 335.872856][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 335.880616][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 335.889645][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 335.900832][ T9851] device veth0_macvtap entered promiscuous mode
[ 335.909311][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 335.917921][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 335.928212][ T9851] device veth1_macvtap entered promiscuous mode
[ 335.935193][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 335.943375][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 335.955143][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 335.965637][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 335.975545][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 335.985983][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 335.995875][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 336.006290][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 336.016111][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 336.026519][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 336.038653][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 336.047452][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 336.056140][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 336.065631][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 336.076199][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 336.086052][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 336.096464][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 336.106280][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 336.116688][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 336.126574][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 336.137159][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 336.151723][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 336.159590][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 336.168374][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
08:44:57 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={0x0}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:57 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:44:57 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40018, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:57 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xabc0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\t\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:44:57 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 96)
[ 336.255794][ T9885] loop2: detected capacity change from 0 to 512
[ 336.259252][ T9886] loop1: detected capacity change from 0 to 85
[ 336.268767][ T9884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2344 sclass=netlink_route_socket pid=9884 comm=syz-executor.5
[ 336.279405][ T9885] FAULT_INJECTION: forcing a failure.
[ 336.279405][ T9885] name failslab, interval 1, probability 0, space 0, times 0
[ 336.294487][ T9885] CPU: 0 PID: 9885 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 336.303166][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 336.313225][ T9885] Call Trace:
[ 336.316508][ T9885]
[ 336.319443][ T9885] dump_stack_lvl+0xd6/0x122
[ 336.324133][ T9885] dump_stack+0x11/0x1b
[ 336.328337][ T9885] should_fail+0x23c/0x250
[ 336.332787][ T9885] ? ext4_fill_super+0x1f0/0x78f0
[ 336.337847][ T9885] __should_failslab+0x81/0x90
[ 336.342624][ T9885] should_failslab+0x5/0x20
[ 336.347136][ T9885] kmem_cache_alloc_trace+0x52/0x350
[ 336.352476][ T9885] ? ext4_fill_super+0x62/0x78f0
[ 336.357542][ T9885] ext4_fill_super+0x1f0/0x78f0
[ 336.362405][ T9885] ? vsnprintf+0xe8f/0xed0
[ 336.367004][ T9885] ? snprintf+0x83/0xb0
[ 336.371178][ T9885] ? set_blocksize+0x197/0x270
[ 336.376068][ T9885] mount_bdev+0x1e8/0x290
[ 336.380433][ T9885] ? ext4_mount+0x40/0x40
[ 336.385314][ T9885] ? ext4_errno_to_code+0x110/0x110
[ 336.390638][ T9885] ext4_mount+0x2d/0x40
[ 336.394878][ T9885] legacy_get_tree+0x70/0xc0
[ 336.399579][ T9885] vfs_get_tree+0x4a/0x1a0
[ 336.404001][ T9885] path_mount+0x11cf/0x1c40
[ 336.408522][ T9885] ? kmem_cache_free+0x65/0x110
[ 336.413390][ T9885] __se_sys_mount+0x24b/0x2f0
[ 336.418529][ T9885] __x64_sys_mount+0x63/0x70
[ 336.419494][ T9892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2600 sclass=netlink_route_socket pid=9892 comm=syz-executor.5
[ 336.423233][ T9885] do_syscall_64+0x44/0xd0
[ 336.423262][ T9885] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 336.446544][ T9885] RIP: 0033:0x7fd1bff5001a
[ 336.451043][ T9885] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 336.470768][ T9885] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 336.479255][ T9885] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 336.487640][ T9885] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 336.495617][ T9885] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
08:44:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\n\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 336.503590][ T9885] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 336.511563][ T9885] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 336.519641][ T9885]
[ 336.523704][ T9889] loop4: detected capacity change from 0 to 512
[ 336.533145][ T9886] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 336.535993][ T9889] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:44:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\v\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 336.567072][ T9889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 336.578026][ T9886] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:44:58 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40022, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:44:58 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 97)
[ 336.634508][ T9897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2856 sclass=netlink_route_socket pid=9897 comm=syz-executor.5
[ 336.657091][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 336.712469][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 336.727095][ T9886] loop1: detected capacity change from 0 to 85
[ 336.730534][ T9901] loop2: detected capacity change from 0 to 512
[ 336.747307][ T9886] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 336.750144][ T9902] loop4: detected capacity change from 0 to 512
08:44:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\f\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 336.763718][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 336.775479][ T9901] FAULT_INJECTION: forcing a failure.
[ 336.775479][ T9901] name failslab, interval 1, probability 0, space 0, times 0
[ 336.788415][ T9901] CPU: 0 PID: 9901 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 336.794453][ T9886] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 336.797221][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 336.797233][ T9901] Call Trace:
[ 336.797301][ T9901]
[ 336.797308][ T9901] dump_stack_lvl+0xd6/0x122
[ 336.827440][ T9901] dump_stack+0x11/0x1b
[ 336.831602][ T9901] should_fail+0x23c/0x250
[ 336.836020][ T9901] ? ext4_fill_super+0x1f0/0x78f0
[ 336.841071][ T9901] __should_failslab+0x81/0x90
[ 336.845892][ T9901] should_failslab+0x5/0x20
[ 336.850456][ T9901] kmem_cache_alloc_trace+0x52/0x350
[ 336.855962][ T9901] ? ext4_fill_super+0x62/0x78f0
[ 336.860913][ T9901] ext4_fill_super+0x1f0/0x78f0
[ 336.865749][ T9901] ? vsnprintf+0xe8f/0xed0
[ 336.870151][ T9901] ? snprintf+0x83/0xb0
[ 336.874396][ T9901] ? set_blocksize+0x197/0x270
[ 336.879166][ T9901] mount_bdev+0x1e8/0x290
[ 336.883482][ T9901] ? ext4_mount+0x40/0x40
[ 336.887838][ T9901] ? ext4_errno_to_code+0x110/0x110
[ 336.893022][ T9901] ext4_mount+0x2d/0x40
[ 336.897166][ T9901] legacy_get_tree+0x70/0xc0
[ 336.901784][ T9901] vfs_get_tree+0x4a/0x1a0
[ 336.906192][ T9901] path_mount+0x11cf/0x1c40
[ 336.910787][ T9901] ? kmem_cache_free+0x65/0x110
[ 336.915628][ T9901] __se_sys_mount+0x24b/0x2f0
[ 336.920292][ T9901] __x64_sys_mount+0x63/0x70
[ 336.924865][ T9901] do_syscall_64+0x44/0xd0
[ 336.929269][ T9901] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 336.935151][ T9901] RIP: 0033:0x7fd1bff5001a
[ 336.939811][ T9901] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 336.959467][ T9901] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 336.967862][ T9901] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 336.975819][ T9901] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 336.983778][ T9901] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 336.991733][ T9901] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 336.999687][ T9901] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 337.007644][ T9901]
[ 337.019002][ T9888] device bridge_slave_0 left promiscuous mode
[ 337.024807][ T9902] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 337.026122][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 337.045436][ T9902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:44:58 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40025, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 337.057040][ T9904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3112 sclass=netlink_route_socket pid=9904 comm=syz-executor.5
[ 337.088269][ T9888] device bridge_slave_1 left promiscuous mode
[ 337.094917][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 337.134841][ T9908] loop4: detected capacity change from 0 to 512
[ 337.146273][ T9888] bond0: (slave bond_slave_0): Releasing backup interface
[ 337.154994][ T9908] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 337.184382][ T9888] bond0: (slave bond_slave_1): Releasing backup interface
[ 337.193624][ T9908] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 337.254185][ T9888] team0: Port device team_slave_0 removed
[ 337.314939][ T9888] team0: Port device team_slave_1 removed
[ 337.322355][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 337.329788][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_0
08:44:58 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={0x0}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 337.366359][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 337.373803][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 337.976328][ T2005] device hsr_slave_0 left promiscuous mode
[ 337.982530][ T2005] device hsr_slave_1 left promiscuous mode
[ 337.991922][ T2005] device veth1_macvtap left promiscuous mode
[ 337.997956][ T2005] device veth0_macvtap left promiscuous mode
[ 338.003946][ T2005] device veth1_vlan left promiscuous mode
[ 338.009784][ T2005] device veth0_vlan left promiscuous mode
[ 338.123805][ T2005] bond0 (unregistering): Released all slaves
[ 338.690598][ T9911] chnl_net:caif_netlink_parms(): no params data found
[ 338.728470][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 338.735566][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 338.744055][ T9911] device bridge_slave_0 entered promiscuous mode
[ 338.751721][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 338.758786][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state
[ 338.766662][ T9911] device bridge_slave_1 entered promiscuous mode
[ 338.783577][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 338.793987][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 338.812568][ T9911] team0: Port device team_slave_0 added
[ 338.818978][ T9911] team0: Port device team_slave_1 added
[ 338.834154][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 338.841153][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 338.867106][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 338.879476][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 338.886440][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 338.912344][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 338.935049][ T9911] device hsr_slave_0 entered promiscuous mode
[ 338.941605][ T9911] device hsr_slave_1 entered promiscuous mode
[ 338.996545][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 339.003601][ T9911] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 339.010943][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 339.017972][ T9911] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 339.044622][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 339.055281][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 339.063822][ T1910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 339.071845][ T1910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 339.084287][ T9911] 8021q: adding VLAN 0 to HW filter on device team0
[ 339.094368][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 339.102972][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 339.110038][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 339.127938][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 339.136440][ T2007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 339.143516][ T2007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 339.152282][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 339.160924][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 339.172892][ T9911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 339.183314][ T9911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 339.196205][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 339.204096][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 339.212980][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 339.227464][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 339.234848][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 339.242296][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 339.249953][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 339.308585][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 339.373034][ T9911] device veth0_vlan entered promiscuous mode
[ 339.379995][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 339.389939][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 339.397734][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 339.408551][ T9911] device veth1_vlan entered promiscuous mode
[ 339.415410][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 339.431869][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 339.440334][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 339.451042][ T9911] device veth0_macvtap entered promiscuous mode
[ 339.459427][ T9911] device veth1_macvtap entered promiscuous mode
[ 339.470468][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 339.480935][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.491264][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 339.501775][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.511608][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 339.522112][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.531933][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 339.542434][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.554959][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 339.562548][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 339.572359][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 339.581253][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 339.591825][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.601709][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 339.612196][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.622023][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 339.632549][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.642382][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 339.652880][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 339.665297][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 339.672554][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 339.681345][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 339.747690][ T9939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 339.768886][ T9939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 339.777687][ T9939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 339.796600][ T9939] device bridge_slave_0 left promiscuous mode
[ 339.803406][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 339.818558][ T9939] device bridge_slave_1 left promiscuous mode
[ 339.825628][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 339.846796][ T9939] bond0: (slave bond_slave_0): Releasing backup interface
[ 339.881740][ T9939] bond0: (slave bond_slave_1): Releasing backup interface
[ 339.958302][ T9939] team0: Port device team_slave_0 removed
[ 340.005842][ T9939] team0: Port device team_slave_1 removed
[ 340.015872][ T9939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 340.023622][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 340.037196][ T9939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 340.045067][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:01 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000280f270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:01 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xac00, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:01 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 98)
08:45:01 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4002e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:01 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={0x0}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 340.117784][ T9944] loop4: detected capacity change from 0 to 512
[ 340.125039][ T9943] loop1: detected capacity change from 0 to 86
[ 340.126325][ T9946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3880 sclass=netlink_route_socket pid=9946 comm=syz-executor.5
[ 340.148773][ T9947] loop2: detected capacity change from 0 to 512
[ 340.162588][ T9944] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 340.168825][ T9943] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 340.186713][ T9947] FAULT_INJECTION: forcing a failure.
[ 340.186713][ T9947] name failslab, interval 1, probability 0, space 0, times 0
[ 340.199356][ T9947] CPU: 0 PID: 9947 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 340.208061][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 340.218124][ T9947] Call Trace:
[ 340.221420][ T9947]
[ 340.224352][ T9947] dump_stack_lvl+0xd6/0x122
[ 340.228950][ T9947] dump_stack+0x11/0x1b
[ 340.233110][ T9947] should_fail+0x23c/0x250
[ 340.237645][ T9947] __should_failslab+0x81/0x90
[ 340.242418][ T9947] should_failslab+0x5/0x20
[ 340.247376][ T9947] kmem_cache_alloc_node+0x61/0x2d0
[ 340.252641][ T9947] ? create_task_io_context+0x36/0x1e0
[ 340.258130][ T9947] ? xas_create+0xabc/0xb10
[ 340.260904][ T9943] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 340.262669][ T9947] create_task_io_context+0x36/0x1e0
[ 340.277224][ T9947] submit_bio_checks+0x828/0x8e0
[ 340.282258][ T9947] ? __rcu_read_unlock+0x5c/0x290
[ 340.287294][ T9947] blk_mq_submit_bio+0x2e1/0x1470
[ 340.292381][ T9947] ? kmem_cache_alloc+0x221/0x320
[ 340.297508][ T9947] ? mempool_alloc_slab+0x16/0x20
[ 340.302549][ T9947] __submit_bio+0x131/0x340
[ 340.307315][ T9947] ? mempool_free+0x130/0x130
[ 340.312014][ T9947] submit_bio_noacct+0x418/0x4e0
[ 340.316966][ T9947] submit_bio+0x10c/0x180
[ 340.321326][ T9947] submit_bh_wbc+0x2db/0x320
[ 340.325926][ T9947] submit_bh+0x21/0x30
[ 340.330001][ T9947] ? __wait_on_buffer+0x60/0x60
[ 340.334859][ T9947] ext4_read_bh+0xf1/0x170
[ 340.339292][ T9947] ext4_sb_bread_unmovable+0xf7/0x1a0
[ 340.344706][ T9947] ext4_fill_super+0x427/0x78f0
[ 340.349574][ T9947] ? vsnprintf+0xe8f/0xed0
[ 340.354155][ T9947] ? snprintf+0x83/0xb0
[ 340.358338][ T9947] ? set_blocksize+0x197/0x270
[ 340.363263][ T9947] mount_bdev+0x1e8/0x290
[ 340.367631][ T9947] ? ext4_mount+0x40/0x40
[ 340.371968][ T9947] ? ext4_errno_to_code+0x110/0x110
[ 340.377197][ T9947] ext4_mount+0x2d/0x40
[ 340.381362][ T9947] legacy_get_tree+0x70/0xc0
[ 340.385969][ T9947] vfs_get_tree+0x4a/0x1a0
[ 340.390594][ T9947] path_mount+0x11cf/0x1c40
[ 340.395104][ T9947] ? kmem_cache_free+0x65/0x110
[ 340.399974][ T9947] __se_sys_mount+0x24b/0x2f0
[ 340.404663][ T9947] ? __this_cpu_preempt_check+0x18/0x20
[ 340.410354][ T9947] __x64_sys_mount+0x63/0x70
[ 340.415003][ T9947] do_syscall_64+0x44/0xd0
[ 340.419430][ T9947] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 340.425340][ T9947] RIP: 0033:0x7fd1bff5001a
[ 340.429786][ T9947] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 340.449489][ T9947] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 340.457917][ T9947] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 340.465889][ T9947] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 340.473943][ T9947] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 340.481917][ T9947] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 340.489893][ T9947] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 340.498022][ T9947]
[ 340.532975][ T9944] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 340.554471][ T9943] loop1: detected capacity change from 0 to 86
[ 340.560856][ T9947] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 340.573750][ T9943] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:02 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002810270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:02 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40032, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 340.593679][ T9943] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 340.616012][ T9947] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 340.655854][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4136 sclass=netlink_route_socket pid=9953 comm=syz-executor.5
08:45:02 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 99)
08:45:02 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xac15, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 340.697854][ T9955] loop4: detected capacity change from 0 to 512
[ 340.714617][ T9958] loop1: detected capacity change from 0 to 86
[ 340.737560][ T9955] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 340.755580][ T9958] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 340.760962][ T9960] loop2: detected capacity change from 0 to 512
[ 340.783798][ T9960] FAULT_INJECTION: forcing a failure.
[ 340.783798][ T9960] name failslab, interval 1, probability 0, space 0, times 0
[ 340.796486][ T9960] CPU: 1 PID: 9960 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 340.805414][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 340.815556][ T9960] Call Trace:
[ 340.818836][ T9960]
[ 340.821775][ T9960] dump_stack_lvl+0xd6/0x122
[ 340.826404][ T9960] dump_stack+0x11/0x1b
[ 340.830656][ T9960] should_fail+0x23c/0x250
[ 340.835085][ T9960] __should_failslab+0x81/0x90
[ 340.839953][ T9960] should_failslab+0x5/0x20
[ 340.844614][ T9960] kmem_cache_alloc_node_trace+0x61/0x310
[ 340.850350][ T9960] ? __crypto_alg_lookup+0x36d/0x3a0
[ 340.855661][ T9960] ? __kmalloc_node+0x30/0x40
[ 340.860402][ T9960] __kmalloc_node+0x30/0x40
[ 340.864965][ T9960] crypto_create_tfm_node+0x4a/0x1f0
[ 340.870256][ T9960] ? crypto_alg_mod_lookup+0x397/0x4e0
[ 340.875744][ T9960] crypto_alloc_tfm_node+0x100/0x290
[ 340.881086][ T9960] crypto_alloc_shash+0x2b/0x30
[ 340.886008][ T9960] ext4_fill_super+0x657/0x78f0
[ 340.889407][ T9958] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 340.890920][ T9960] ? vsnprintf+0xe8f/0xed0
[ 340.904604][ T9960] ? snprintf+0x83/0xb0
[ 340.908764][ T9960] ? set_blocksize+0x197/0x270
[ 340.913527][ T9960] mount_bdev+0x1e8/0x290
[ 340.917869][ T9960] ? ext4_mount+0x40/0x40
[ 340.922206][ T9960] ? ext4_errno_to_code+0x110/0x110
[ 340.927424][ T9960] ext4_mount+0x2d/0x40
[ 340.931678][ T9960] legacy_get_tree+0x70/0xc0
[ 340.936270][ T9960] vfs_get_tree+0x4a/0x1a0
[ 340.940770][ T9960] path_mount+0x11cf/0x1c40
[ 340.945275][ T9960] ? kmem_cache_free+0x65/0x110
[ 340.950140][ T9960] __se_sys_mount+0x24b/0x2f0
[ 340.954828][ T9960] __x64_sys_mount+0x63/0x70
[ 340.959492][ T9960] do_syscall_64+0x44/0xd0
[ 340.963946][ T9960] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 340.969934][ T9960] RIP: 0033:0x7fd1bff5001a
[ 340.974348][ T9960] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
08:45:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002811270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 340.975086][ T9962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4392 sclass=netlink_route_socket pid=9962 comm=syz-executor.5
[ 340.994148][ T9960] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 340.994172][ T9960] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 340.994184][ T9960] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 340.994246][ T9960] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 340.994257][ T9960] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 340.994269][ T9960] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 340.994308][ T9960]
[ 340.994341][ T9960] EXT4-fs (loop2): Cannot load crc32c driver.
[ 341.075908][ T9955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 341.099793][ T9958] loop1: detected capacity change from 0 to 86
08:45:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002814270d00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 341.126865][ T9958] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:02 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40043, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 341.174901][ T9958] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 341.215496][ T9966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5160 sclass=netlink_route_socket pid=9966 comm=syz-executor.5
08:45:02 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xac40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 341.267656][ T9969] loop4: detected capacity change from 0 to 512
[ 341.287004][ T1849] device hsr_slave_0 left promiscuous mode
[ 341.296446][ T9969] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 341.304717][ T1849] device hsr_slave_1 left promiscuous mode
[ 341.317964][ T1849] device veth1_macvtap left promiscuous mode
[ 341.323974][ T1849] device veth0_macvtap left promiscuous mode
[ 341.330015][ T1849] device veth1_vlan left promiscuous mode
[ 341.334402][ T9971] loop1: detected capacity change from 0 to 86
[ 341.335805][ T1849] device veth0_vlan left promiscuous mode
08:45:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(`\'\r\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 341.366549][ T9971] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 341.384802][ T9969] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 341.397944][ T9974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24616 sclass=netlink_route_socket pid=9974 comm=syz-executor.5
[ 341.413552][ T9971] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:03 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40048, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 341.485922][ T9971] loop1: detected capacity change from 0 to 86
[ 341.512983][ T9971] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 341.559868][ T9971] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 341.603050][ T9977] loop4: detected capacity change from 0 to 512
[ 341.617297][ T9977] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 341.638552][ T9977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 341.796689][ T1849] bond0 (unregistering): Released all slaves
[ 342.288374][ T9980] chnl_net:caif_netlink_parms(): no params data found
[ 342.348680][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state
[ 342.355857][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state
[ 342.364327][ T9980] device bridge_slave_0 entered promiscuous mode
[ 342.383044][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 342.390153][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state
[ 342.411596][ T9980] device bridge_slave_1 entered promiscuous mode
[ 342.452357][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 342.463601][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 342.484619][ T9980] team0: Port device team_slave_0 added
[ 342.491086][ T9980] team0: Port device team_slave_1 added
[ 342.506602][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 342.513550][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 342.539497][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 342.552397][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 342.559389][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 342.585312][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 342.610041][ T9980] device hsr_slave_0 entered promiscuous mode
[ 342.617360][ T9980] device hsr_slave_1 entered promiscuous mode
[ 342.675090][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 342.682134][ T9980] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 342.689403][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state
[ 342.696434][ T9980] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 342.723845][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0
[ 342.734876][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 342.743042][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 342.751240][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 342.763069][ T9980] 8021q: adding VLAN 0 to HW filter on device team0
[ 342.773367][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 342.781865][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 342.788895][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 342.806554][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 342.814995][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 342.822005][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 342.831524][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 342.840292][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 342.852594][ T9980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 342.862957][ T9980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 342.876700][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 342.885879][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 342.894337][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 342.909389][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 342.919978][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 342.928001][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 342.943347][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 342.991361][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 343.000657][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 343.059711][ T9980] device veth0_vlan entered promiscuous mode
[ 343.069767][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 343.078251][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 343.089239][ T9980] device veth1_vlan entered promiscuous mode
[ 343.096152][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 343.103899][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 343.111925][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 343.126201][ T9980] device veth0_macvtap entered promiscuous mode
[ 343.133843][ T9980] device veth1_macvtap entered promiscuous mode
[ 343.143011][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 343.152193][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 343.160828][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 343.169353][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 343.180857][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 343.191593][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.201403][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 343.211869][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.221727][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 343.232135][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.242016][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 343.252457][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.264818][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 343.272969][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 343.281993][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 343.290675][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 343.307108][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 343.317619][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.327540][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 343.337982][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.347808][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 343.358236][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.368063][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 343.378473][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 343.391391][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 343.399678][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 343.408504][ T2007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 343.518091][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 343.539922][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 343.549370][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 343.566137][T10018] device bridge_slave_0 left promiscuous mode
[ 343.572844][T10018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 343.588664][T10018] device bridge_slave_1 left promiscuous mode
[ 343.596074][T10018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 343.615649][T10018] bond0: (slave bond_slave_0): Releasing backup interface
[ 343.652130][T10018] bond0: (slave bond_slave_1): Releasing backup interface
[ 343.733183][T10018] team0: Port device team_slave_0 removed
[ 343.784905][T10018] team0: Port device team_slave_1 removed
[ 343.800131][T10018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 343.808102][T10018] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 343.822428][T10018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 343.830339][T10018] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 343.873597][T10007] chnl_net:caif_netlink_parms(): no params data found
08:45:05 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xac80, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 343.941607][T10024] loop1: detected capacity change from 0 to 86
[ 343.958478][T10024] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 343.970870][T10007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 343.977957][T10007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 343.985772][T10024] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 343.996041][T10007] device bridge_slave_0 entered promiscuous mode
[ 344.065014][T10024] loop1: detected capacity change from 0 to 86
[ 344.073748][T10007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 344.074086][T10024] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 344.080831][T10007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 344.081354][T10007] device bridge_slave_1 entered promiscuous mode
[ 344.102701][T10024] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 344.119547][T10007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 344.130204][T10007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 344.160405][T10007] team0: Port device team_slave_0 added
[ 344.184493][T10007] team0: Port device team_slave_1 added
[ 344.202413][T10007] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 344.209390][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 344.235300][T10007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 344.250159][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 344.257205][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 344.283324][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 344.314364][T10007] device hsr_slave_0 entered promiscuous mode
[ 344.322586][T10007] device hsr_slave_1 entered promiscuous mode
[ 344.329221][T10007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 344.337203][T10007] Cannot create hsr debugfs directory
[ 344.376129][T10007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 344.385228][T10007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 344.392454][T10007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 344.399511][T10007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 344.438936][T10007] 8021q: adding VLAN 0 to HW filter on device bond0
[ 344.452483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 344.460993][ T5] bridge0: port 1(bridge_slave_0) entered disabled state
[ 344.470287][ T5] bridge0: port 2(bridge_slave_1) entered disabled state
[ 344.480378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 344.492480][T10007] 8021q: adding VLAN 0 to HW filter on device team0
[ 344.508178][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 344.516696][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 344.523725][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 344.543950][T10007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 344.554527][T10007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 344.573582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 344.582041][ T5] bridge0: port 2(bridge_slave_1) entered blocking state
[ 344.589104][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 344.598486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 344.607375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 344.616369][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 344.624899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 344.643354][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 344.652162][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 344.660162][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 344.667873][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 344.675676][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 344.724053][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 344.738414][ T1849] device hsr_slave_0 left promiscuous mode
[ 344.747405][ T1849] device hsr_slave_1 left promiscuous mode
[ 344.756637][ T1849] device veth1_macvtap left promiscuous mode
[ 344.762996][ T1849] device veth0_macvtap left promiscuous mode
[ 344.769046][ T1849] device veth1_vlan left promiscuous mode
[ 344.774782][ T1849] device veth0_vlan left promiscuous mode
[ 344.893833][ T1849] bond0 (unregistering): Released all slaves
[ 344.974409][T10007] device veth0_vlan entered promiscuous mode
[ 344.981299][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 344.990943][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 345.001519][T10007] device veth1_vlan entered promiscuous mode
[ 345.010347][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 345.018099][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 345.026905][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 345.041122][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 345.050635][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 345.059682][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 345.070023][T10007] device veth0_macvtap entered promiscuous mode
[ 345.079951][T10007] device veth1_macvtap entered promiscuous mode
[ 345.091206][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 345.101713][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.111603][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 345.122010][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.131839][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 345.142263][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.152073][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 345.162489][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.173567][T10007] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 345.181138][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 345.189517][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 345.197547][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 345.206283][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 345.217345][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 345.227888][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.237719][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 345.248248][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.258159][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 345.268787][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.278708][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 345.289132][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 345.300670][T10007] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 345.308424][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 345.317323][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 345.428688][T10040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 345.480175][T10040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 345.516505][T10040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 345.534810][T10040] device bridge_slave_0 left promiscuous mode
[ 345.541589][T10040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 345.556408][T10040] device bridge_slave_1 left promiscuous mode
[ 345.563265][T10040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 345.580334][T10040] bond0: (slave bond_slave_0): Releasing backup interface
[ 345.615516][T10040] bond0: (slave bond_slave_1): Releasing backup interface
[ 345.689834][T10040] team0: Port device team_slave_0 removed
[ 345.736541][T10040] team0: Port device team_slave_1 removed
[ 345.746776][T10040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 345.754567][T10040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 345.769734][T10040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 345.777793][T10040] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:07 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0200"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:07 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4004a, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:07 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (fail_nth: 100)
08:45:07 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/402], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003e80)={r0, 0x0, 0x71, 0x95, &(0x7f00000004c0)="d423622f4a9fe4836f4d2d8655dc90b72f595fa9e78a29e25faa79d19ab3bef5f1965e233e1f7d6d4518c725707891361929fb50f1d3a7022d840dea62f7278b5c7dc3a885b734cc2082fcf24e5415c8eaf7b74b103b98c0401854ae320e3bddb72dba27cd9df23a202e5968a3901b0ed3", &(0x7f0000000540)=""/149, 0x5e867e50, 0x0, 0x92, 0xa1, &(0x7f0000003a80)="123d9e2e4428a298d2167b654e6ed70630971410cc3735ab3e158bca03b303abb2a90e1b525b6718fecc515ec59effe5e86746ae82b9ae8cd30b3d2c08c69b8ca9e8b3334718027dbbce284779f43a82703311384477706b18664c9355c2fde33d4afd6b9b2a18b6b1ad71fdff45c62624c1f0f690e0a83e3c2ac7ddc1a5de32cc731396818605881d717eed6e0b91ebb119", &(0x7f0000003dc0)="f969ca8afe4d71498194a064722b0bc4462a76ab3fea9e537adf14ab4475f0d2081b7cbd5276bb83ac28208e6d3f6da2cf5debf0f1aea3c28e35062a91f1b3902ce13d06d9cf687697eb0214d5d5a37b5d9d8996f93a76f03389286a8b7bd966f2603009cc319cfb3121e3cee9f864073aae5c24dccd37873a0b89426c455cd39372830a7b946a67612562ad20b01761d6510361e1245f2a959f8d2318c74e8ccc"}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x7, 0x3abe, 0x34, @private0, @remote, 0x8000, 0x8, 0x4, 0x9}})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/195, 0xc3}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/249, 0xf9}, {&(0x7f0000003f00)=""/148, 0x94}, {&(0x7f0000001c00)=""/46, 0x2e}, {&(0x7f0000001c40)=""/172, 0xac}, {&(0x7f0000001d00)=""/147, 0x93}, {&(0x7f0000001dc0)=""/146, 0x92}, {&(0x7f0000001e80)=""/162, 0xa2}], 0xa, &(0x7f0000002000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/154, 0x9a}, {&(0x7f0000002180)=""/52, 0x34}, {&(0x7f00000021c0)=""/7, 0x7}, {&(0x7f0000002200)=""/8, 0x8}], 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000a42dccd3f0a9930641dbe30a97"], 0x38}}, {{&(0x7f00000022c0), 0x6e, &(0x7f0000003500)=[{&(0x7f0000002340)=""/167, 0xa7}, {&(0x7f0000002400)=""/3, 0x3}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/163, 0xa3}], 0x4, &(0x7f0000003540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003700)=""/195, 0xc3}, {&(0x7f0000003800)=""/190, 0xbe}, {&(0x7f00000038c0)=""/84, 0x54}, {&(0x7f0000003940)=""/62, 0x3e}, {&(0x7f0000003980)=""/95, 0x5f}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003000000000050a57fca4cec122634b4f450000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8}}], 0x4, 0x40, &(0x7f0000003c80)={0x77359400})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003d40)=@bpf_ext={0x1c, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x66}, @exit, @ldst={0x3, 0x0, 0x0, 0x9, 0x4, 0xfffffffffffffff4, 0x4}, @map={0x18, 0x7, 0x1, 0x0, r2}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x86}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000003cc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000003d00)={0x2, 0xb, 0x8, 0x1}, 0x10, 0x1ff0c, r0}, 0x78)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @map={0x18, 0xf0c71c1c27651742}], &(0x7f0000000080)='GPL\x00', 0x1, 0x70, &(0x7f0000000140)=""/112, 0x40f00, 0xe, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x8, 0x0, 0xf43}, 0x10, r1, r6}, 0x78)
08:45:07 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xacc0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 345.875752][T10045] loop4: detected capacity change from 0 to 512
[ 345.877585][T10046] loop2: detected capacity change from 0 to 512
[ 345.890371][T10045] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 345.904510][T10048] loop1: detected capacity change from 0 to 86
08:45:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0300"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 345.935557][T10048] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 345.944109][T10048] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 345.954757][T10046] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 345.972831][T10046] FAULT_INJECTION: forcing a failure.
[ 345.972831][T10046] name failslab, interval 1, probability 0, space 0, times 0
[ 345.985662][T10046] CPU: 0 PID: 10046 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
[ 345.994421][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 346.004499][T10046] Call Trace:
[ 346.007783][T10046]
[ 346.010715][T10046] dump_stack_lvl+0xd6/0x122
[ 346.015314][T10046] dump_stack+0x11/0x1b
[ 346.019540][T10046] should_fail+0x23c/0x250
[ 346.023957][T10046] ? mempool_alloc_slab+0x16/0x20
[ 346.029075][T10046] __should_failslab+0x81/0x90
[ 346.033847][T10046] should_failslab+0x5/0x20
[ 346.038436][T10046] kmem_cache_alloc+0x4f/0x320
[ 346.043208][T10046] mempool_alloc_slab+0x16/0x20
[ 346.048090][T10046] ? mempool_free+0x130/0x130
[ 346.052779][T10046] mempool_alloc+0x9d/0x310
[ 346.057308][T10046] bio_alloc_bioset+0xcc/0x560
[ 346.062077][T10046] ? __find_get_block+0x8b4/0x9b0
[ 346.067179][T10046] submit_bh_wbc+0x133/0x320
[ 346.071779][T10046] ? __getblk_gfp+0x493/0x530
[ 346.076552][T10046] submit_bh+0x21/0x30
[ 346.080750][T10046] ? __wait_on_buffer+0x60/0x60
[ 346.085626][T10046] ext4_read_bh+0xf1/0x170
[ 346.090142][T10046] ext4_sb_bread_unmovable+0xf7/0x1a0
[ 346.095574][T10046] ext4_fill_super+0x22c4/0x78f0
[ 346.100530][T10046] ? vsnprintf+0xe8f/0xed0
[ 346.104956][T10046] ? snprintf+0x83/0xb0
[ 346.109150][T10046] ? set_blocksize+0x197/0x270
[ 346.113922][T10046] mount_bdev+0x1e8/0x290
[ 346.119635][T10046] ? ext4_mount+0x40/0x40
[ 346.124034][T10046] ? ext4_errno_to_code+0x110/0x110
[ 346.129250][T10046] ext4_mount+0x2d/0x40
[ 346.133415][T10046] legacy_get_tree+0x70/0xc0
[ 346.138042][T10046] vfs_get_tree+0x4a/0x1a0
[ 346.142509][T10046] path_mount+0x11cf/0x1c40
[ 346.147023][T10046] ? kmem_cache_free+0x65/0x110
[ 346.151878][T10046] __se_sys_mount+0x24b/0x2f0
[ 346.156559][T10046] __x64_sys_mount+0x63/0x70
[ 346.161223][T10046] do_syscall_64+0x44/0xd0
[ 346.165643][T10046] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 346.171544][T10046] RIP: 0033:0x7fd1bff5001a
[ 346.176028][T10046] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 346.195636][T10046] RSP: 002b:00007fd1bdcc4fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 346.204103][T10046] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 00007fd1bff5001a
[ 346.212100][T10046] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007fd1bdcc5000
[ 346.220096][T10046] RBP: 00007fd1bdcc5040 R08: 00007fd1bdcc5040 R09: 00000000200000c0
[ 346.228105][T10046] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200000c0
[ 346.236100][T10046] R13: 0000000020000000 R14: 00007fd1bdcc5000 R15: 0000000020000300
[ 346.244078][T10046]
[ 346.268074][T10048] loop1: detected capacity change from 0 to 86
08:45:07 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0400"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 346.284511][T10045] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 346.296618][T10046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 346.315603][T10048] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 346.358172][T10048] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:08 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:08 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4004c, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0500"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:08 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xad00, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 346.499251][T10062] loop4: detected capacity change from 0 to 512
[ 346.516762][T10062] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 346.540274][T10062] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 346.549969][T10066] loop1: detected capacity change from 0 to 86
08:45:08 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40060, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0600"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 346.597378][T10066] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 346.629406][T10066] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\a\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 346.642890][T10068] loop2: detected capacity change from 0 to 512
[ 346.653663][T10073] loop4: detected capacity change from 0 to 512
[ 346.686198][T10073] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 346.701241][T10068] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 346.726693][T10066] loop1: detected capacity change from 0 to 86
[ 346.740288][T10066] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 346.740323][T10068] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 346.763510][T10073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 346.787158][T10066] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 346.876250][ T1849] device hsr_slave_0 left promiscuous mode
[ 346.884008][ T1849] device hsr_slave_1 left promiscuous mode
[ 346.905098][ T1849] device veth1_macvtap left promiscuous mode
[ 346.911183][ T1849] device veth0_macvtap left promiscuous mode
[ 346.917268][ T1849] device veth1_vlan left promiscuous mode
[ 346.923037][ T1849] device veth0_vlan left promiscuous mode
[ 347.247340][ T1849] bond0 (unregistering): Released all slaves
[ 348.152022][T10080] chnl_net:caif_netlink_parms(): no params data found
[ 348.186628][T10080] bridge0: port 1(bridge_slave_0) entered blocking state
[ 348.193676][T10080] bridge0: port 1(bridge_slave_0) entered disabled state
[ 348.201631][T10080] device bridge_slave_0 entered promiscuous mode
[ 348.208908][T10080] bridge0: port 2(bridge_slave_1) entered blocking state
[ 348.215961][T10080] bridge0: port 2(bridge_slave_1) entered disabled state
[ 348.223967][T10080] device bridge_slave_1 entered promiscuous mode
[ 348.245226][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 348.257110][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 348.275437][T10080] team0: Port device team_slave_0 added
[ 348.281859][T10080] team0: Port device team_slave_1 added
[ 348.297666][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 348.304748][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 348.330676][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 348.343914][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 348.350938][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 348.376832][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 348.399792][T10080] device hsr_slave_0 entered promiscuous mode
[ 348.407604][T10080] device hsr_slave_1 entered promiscuous mode
[ 348.618761][T10080] 8021q: adding VLAN 0 to HW filter on device bond0
[ 348.633386][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 348.641372][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 348.650159][T10080] 8021q: adding VLAN 0 to HW filter on device team0
[ 348.659113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 348.667910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 348.676521][ T5] bridge0: port 1(bridge_slave_0) entered blocking state
[ 348.683550][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 348.708694][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 348.716996][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 348.726901][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 348.735335][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 348.742404][ T1914] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 348.750479][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 348.759315][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 348.768131][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 348.776689][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 348.785306][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 348.793672][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 348.802321][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 348.810507][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 348.819813][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 348.829136][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 348.850483][T10080] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 348.867419][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 348.876178][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 348.920033][T10095] chnl_net:caif_netlink_parms(): no params data found
[ 348.966352][T10095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 348.973502][T10095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 348.981368][T10095] device bridge_slave_0 entered promiscuous mode
[ 348.990293][T10095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 348.997478][T10095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 349.005655][T10095] device bridge_slave_1 entered promiscuous mode
[ 349.032581][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 349.043166][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 349.057166][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 349.091248][T10095] team0: Port device team_slave_0 added
[ 349.099859][T10095] team0: Port device team_slave_1 added
[ 349.132115][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 349.139130][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 349.165113][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 349.192167][T10080] device veth0_vlan entered promiscuous mode
[ 349.200838][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 349.209418][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 349.218397][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 349.228152][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 349.235155][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 349.261224][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 349.285837][T10080] device veth1_vlan entered promiscuous mode
[ 349.299067][T10095] device hsr_slave_0 entered promiscuous mode
[ 349.305764][T10095] device hsr_slave_1 entered promiscuous mode
[ 349.312088][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 349.320834][T10095] Cannot create hsr debugfs directory
[ 349.330037][T10080] device veth0_macvtap entered promiscuous mode
[ 349.338669][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 349.346934][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 349.356477][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 349.365046][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 349.378302][T10080] device veth1_macvtap entered promiscuous mode
[ 349.389437][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 349.400135][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.410044][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 349.420561][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.430471][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 349.440912][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.450728][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 349.461325][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.474852][T10080] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 349.482384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 349.491046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 349.502894][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 349.513363][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.523177][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 349.533595][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.543497][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 349.553926][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.563742][T10080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 349.574309][T10080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 349.587216][T10080] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 349.597043][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 349.607295][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
08:45:11 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\b\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:11 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40068, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 349.700718][T10095] 8021q: adding VLAN 0 to HW filter on device bond0
[ 349.710463][T10129] loop4: detected capacity change from 0 to 512
[ 349.717981][T10129] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 349.745879][T10129] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 349.766058][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 349.788660][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 349.797769][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 349.816293][T10130] device bridge_slave_0 left promiscuous mode
[ 349.823089][T10130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 349.837712][T10130] device bridge_slave_1 left promiscuous mode
[ 349.844319][T10130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 349.861658][T10130] bond0: (slave bond_slave_0): Releasing backup interface
[ 349.897275][T10130] bond0: (slave bond_slave_1): Releasing backup interface
[ 349.969401][T10130] team0: Port device team_slave_0 removed
[ 350.019076][T10130] team0: Port device team_slave_1 removed
[ 350.029420][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 350.037529][T10130] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 350.052405][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 350.060224][T10130] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 350.104371][T10095] 8021q: adding VLAN 0 to HW filter on device team0
[ 350.119483][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 350.127546][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 350.145288][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 350.153859][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 350.172078][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 350.179203][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 350.200976][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 350.209584][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 350.218175][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 350.225379][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 350.233377][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 350.242630][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 350.251572][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 350.260271][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 350.268876][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 350.277537][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 350.290440][T10095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 350.300842][T10095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 350.316719][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 350.324809][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 350.332819][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 350.341190][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 350.349668][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 350.358154][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 350.418222][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 350.429305][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 350.439048][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 350.446549][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 350.526320][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 350.536202][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 350.605067][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 350.613493][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 350.624600][T10095] device veth0_vlan entered promiscuous mode
[ 350.635082][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 350.642659][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 350.654601][T10095] device veth1_vlan entered promiscuous mode
[ 350.667881][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 350.676057][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 350.683986][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 350.692976][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 350.705959][T10095] device veth0_macvtap entered promiscuous mode
[ 350.713588][T10095] device veth1_macvtap entered promiscuous mode
[ 350.725347][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 350.735830][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.745686][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 350.756154][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.765970][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 350.776428][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.786251][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 350.796768][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.809755][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 350.821132][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 350.829307][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 350.837168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 350.845658][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 350.855170][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 350.865647][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.875484][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 350.885959][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.895854][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 350.906265][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.916079][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 350.926580][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 350.938841][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 350.950757][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 350.959505][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 351.033159][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 351.053574][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 351.065251][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 351.084688][T10148] device bridge_slave_0 left promiscuous mode
[ 351.091387][T10148] bridge0: port 1(bridge_slave_0) entered disabled state
[ 351.107661][T10148] device bridge_slave_1 left promiscuous mode
[ 351.114347][T10148] bridge0: port 2(bridge_slave_1) entered disabled state
[ 351.133272][T10148] bond0: (slave bond_slave_0): Releasing backup interface
[ 351.173975][T10148] bond0: (slave bond_slave_1): Releasing backup interface
[ 351.250102][T10148] team0: Port device team_slave_0 removed
[ 351.297894][T10148] team0: Port device team_slave_1 removed
[ 351.309140][T10148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 351.317128][T10148] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 351.331481][T10148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 351.339670][T10148] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:12 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:12 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa33e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:12 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xad40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\t\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:12 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4006c, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:12 executing program 3:
unshare(0x400)
unshare(0x28000100)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd600489f1009c1100fe800000000000000000000100000000fe8000000000000000000000000000aa00000e22009c90"], 0x0)
socket(0x9, 0x5, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
unshare(0x100)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbip_core', 0x280, 0x110)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@jmp={0x5, 0x1, 0x9, 0xb, 0x8, 0x50, 0x8}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xe9}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xd, 0x2, 0x80}, 0x10}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10)
flock(0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000100)=ANY=[], 0xbf)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)
[ 351.413808][T10150] loop2: detected capacity change from 0 to 81
[ 351.430917][T10152] loop1: detected capacity change from 0 to 86
[ 351.439462][T10155] loop4: detected capacity change from 0 to 512
[ 351.452901][T10150] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:45:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\n\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 351.486490][T10155] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 351.494873][T10152] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 351.514941][T10150] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 351.524482][T10152] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 351.549477][T10155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 351.569161][T10150] loop2: detected capacity change from 0 to 81
[ 351.576130][T10152] loop1: detected capacity change from 0 to 86
[ 351.586952][ T2005] device hsr_slave_0 left promiscuous mode
08:45:13 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40074, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 351.605060][T10150] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 351.613379][ T2005] device hsr_slave_1 left promiscuous mode
[ 351.623560][T10152] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 351.646092][ T2005] device veth1_macvtap left promiscuous mode
[ 351.652170][ T2005] device veth0_macvtap left promiscuous mode
[ 351.658220][ T2005] device veth1_vlan left promiscuous mode
[ 351.663967][ T2005] device veth0_vlan left promiscuous mode
[ 351.666102][T10150] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 351.693184][T10152] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 351.702920][T10163] loop4: detected capacity change from 0 to 512
[ 351.719725][T10163] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:13 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa33f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:13 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xad80, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 351.753324][T10163] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:13 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40076, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 351.823650][T10167] loop2: detected capacity change from 0 to 81
[ 351.855078][T10167] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 351.867981][T10168] loop1: detected capacity change from 0 to 86
[ 351.890386][T10168] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 351.894219][T10167] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 351.911659][T10170] loop4: detected capacity change from 0 to 512
[ 351.913057][T10168] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 351.936361][T10170] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 351.947852][T10167] loop2: detected capacity change from 0 to 81
[ 351.968948][T10167] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 351.983871][T10170] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 351.996873][T10167] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 352.009539][T10168] loop1: detected capacity change from 0 to 86
08:45:13 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4007a, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 352.026341][T10168] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 352.052335][T10168] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 352.127001][T10173] loop4: detected capacity change from 0 to 512
[ 352.144645][T10173] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 352.170801][T10173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 352.221619][ T2005] bond0 (unregistering): Released all slaves
08:45:13 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:13 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa340, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:13 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xadc0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:13 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x400ea, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\v\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 352.303269][T10176] loop2: detected capacity change from 0 to 81
[ 352.327894][T10176] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 352.330193][T10178] loop1: detected capacity change from 0 to 86
[ 352.343260][T10180] loop4: detected capacity change from 0 to 512
[ 352.353298][T10176] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 352.372976][T10178] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 352.384920][T10180] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 352.387445][T10178] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 352.416198][T10180] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 352.427549][T10176] loop2: detected capacity change from 0 to 81
[ 352.435608][T10176] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 352.443970][T10176] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 352.478768][T10178] loop1: detected capacity change from 0 to 86
[ 352.488396][T10178] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 352.505579][T10178] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 353.216651][ T2005] device hsr_slave_0 left promiscuous mode
[ 353.222949][ T2005] device hsr_slave_1 left promiscuous mode
[ 353.232877][ T2005] device veth1_macvtap left promiscuous mode
[ 353.238898][ T2005] device veth0_macvtap left promiscuous mode
[ 353.244942][ T2005] device veth1_vlan left promiscuous mode
[ 353.250690][ T2005] device veth0_vlan left promiscuous mode
[ 353.369405][ T2005] bond0 (unregistering): Released all slaves
[ 353.683527][T10187] chnl_net:caif_netlink_parms(): no params data found
[ 353.718488][T10187] bridge0: port 1(bridge_slave_0) entered blocking state
[ 353.725645][T10187] bridge0: port 1(bridge_slave_0) entered disabled state
[ 353.733174][T10187] device bridge_slave_0 entered promiscuous mode
[ 353.754956][T10187] bridge0: port 2(bridge_slave_1) entered blocking state
[ 353.762006][T10187] bridge0: port 2(bridge_slave_1) entered disabled state
[ 353.785456][T10187] device bridge_slave_1 entered promiscuous mode
[ 353.810724][T10187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 353.836481][T10187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 353.876644][T10187] team0: Port device team_slave_0 added
[ 353.883017][T10187] team0: Port device team_slave_1 added
[ 353.899915][T10187] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 353.906910][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 353.932862][T10187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 353.944003][T10187] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 353.950954][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 353.976987][T10187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 354.020498][T10187] device hsr_slave_0 entered promiscuous mode
[ 354.033006][T10187] device hsr_slave_1 entered promiscuous mode
[ 354.098796][T10187] bridge0: port 2(bridge_slave_1) entered blocking state
[ 354.105879][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 354.113103][T10187] bridge0: port 1(bridge_slave_0) entered blocking state
[ 354.120150][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 354.147614][T10187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 354.159065][T10187] 8021q: adding VLAN 0 to HW filter on device team0
[ 354.166979][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 354.175233][ T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 354.183208][ T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 354.208335][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 354.216958][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 354.223981][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 354.231815][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 354.240295][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 354.247328][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 354.256787][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 354.265514][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 354.274036][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 354.282438][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 354.291651][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 354.299710][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 354.312719][T10187] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 354.322468][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 354.329931][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 354.386945][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 354.447020][T10187] device veth0_vlan entered promiscuous mode
[ 354.454993][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 354.463461][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 354.472387][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 354.480929][T10187] device veth1_vlan entered promiscuous mode
[ 354.488766][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 354.502845][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 354.512494][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 354.521932][T10187] device veth0_macvtap entered promiscuous mode
[ 354.530824][T10187] device veth1_macvtap entered promiscuous mode
[ 354.541458][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 354.551926][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.561794][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 354.572226][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.582070][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 354.592504][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.602312][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 354.612794][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.626147][T10187] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 354.634066][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 354.643567][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 354.652800][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 354.663269][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.673084][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 354.683566][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.693500][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 354.703905][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.713813][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 354.724331][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 354.736667][T10187] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 354.744342][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 354.753124][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
08:45:16 executing program 3:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40074, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:16 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x24, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:16 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa341, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\f\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:16 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x400f0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:16 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xae00, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 355.266679][T10218] loop2: detected capacity change from 0 to 81
[ 355.293577][T10224] loop1: detected capacity change from 0 to 87
[ 355.294094][T10225] loop4: detected capacity change from 0 to 512
[ 355.301871][T10226] loop3: detected capacity change from 0 to 512
[ 355.308928][T10218] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 355.321594][T10224] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 355.322482][T10225] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 355.356243][T10218] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0f00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 355.356944][T10226] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 355.373857][T10224] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 355.380564][T10225] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:17 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x400fe, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:17 executing program 3:
r0 = socket(0x10, 0x801, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000ca00280128bd7000fb0040000000d808", @ANYRES32=0x0, @ANYBLOB="020000000800020000000000080002000000000014000100"/40], 0x40}}, 0x810)
[ 355.414523][T10226] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d1000"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 355.467876][T10224] loop1: detected capacity change from 0 to 87
[ 355.474143][T10218] loop2: detected capacity change from 0 to 81
[ 355.495969][T10224] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 355.523181][T10218] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 355.525135][T10239] loop4: detected capacity change from 0 to 512
[ 355.555816][T10224] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 355.556089][T10239] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:17 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0x81, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000003c0)="d8e72d5f04f2e0e8a399dc76bda9072f", 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x1d0, 0x2a5, 0x150, 0x1d0, 0x228, 0x2a0, 0x2a0, 0x228, 0x2a0, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}, {{@ipv6={@local, @mcast2, [], [], 'erspan0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x248, 0x338, 0xffffffff, 0x0, 0x0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xff, 0xff0000ff, 0xff], [0xff000000, 0xff, 0x1fe000000, 0xff000000], 'nr0\x00', 'bond0\x00', {0xff}, {0xff}, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0xa4a, 0x66]}}}, {{@ipv6={@ipv4, @loopback, [0xffffff00, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@mcast1, @port, @icmp_id=0x68}}}, {{@ipv6={@mcast2, @private0, [], [], '\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x80, 0x2, 0x4e}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv4, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
r3 = socket$inet6(0xa, 0x1, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400))
08:45:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d1100"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 355.575884][T10218] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 355.612733][T10244] Cannot find del_set index 0 as target
[ 355.626893][T10239] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:17 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xae40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 355.724816][T10249] loop1: detected capacity change from 0 to 87
[ 355.737405][T10249] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 355.765937][T10249] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 355.828220][T10249] loop1: detected capacity change from 0 to 87
[ 355.844968][T10249] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 355.864995][T10249] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 357.249559][T10251] chnl_net:caif_netlink_parms(): no params data found
[ 357.284544][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 357.291691][T10251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 357.299575][T10251] device bridge_slave_0 entered promiscuous mode
[ 357.306809][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 357.313829][T10251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 357.322164][T10251] device bridge_slave_1 entered promiscuous mode
[ 357.340442][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 357.351023][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 357.370372][T10251] team0: Port device team_slave_0 added
[ 357.376827][T10251] team0: Port device team_slave_1 added
[ 357.391836][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 357.398810][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 357.424804][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 357.436107][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 357.443061][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 357.469038][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 357.492688][T10251] device hsr_slave_0 entered promiscuous mode
[ 357.500305][T10251] device hsr_slave_1 entered promiscuous mode
[ 357.508307][T10251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 357.516163][T10251] Cannot create hsr debugfs directory
[ 357.552851][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 357.560002][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 357.567411][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 357.574509][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 357.603495][T10251] 8021q: adding VLAN 0 to HW filter on device bond0
[ 357.614013][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 357.622454][ T1919] bridge0: port 1(bridge_slave_0) entered disabled state
[ 357.630426][ T1919] bridge0: port 2(bridge_slave_1) entered disabled state
[ 357.639414][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 357.650450][T10251] 8021q: adding VLAN 0 to HW filter on device team0
[ 357.660400][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 357.669086][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 357.676124][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 357.698699][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 357.707573][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 357.714786][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 357.723820][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 357.732745][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 357.741211][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 357.749556][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 357.758769][T10251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 357.767270][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 357.782376][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 357.790279][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 357.797980][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 357.852135][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 357.913848][T10251] device veth0_vlan entered promiscuous mode
[ 357.922849][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 357.931564][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 357.940541][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 357.950801][T10251] device veth1_vlan entered promiscuous mode
[ 357.958741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 357.973384][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 357.982796][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 357.992332][T10251] device veth0_macvtap entered promiscuous mode
[ 358.002450][T10251] device veth1_macvtap entered promiscuous mode
[ 358.013498][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 358.023974][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.033802][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 358.044213][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.054228][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 358.064750][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.074549][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 358.084979][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.094809][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 358.105261][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.117794][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 358.126020][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 358.135825][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 358.144868][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 358.155288][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.165133][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 358.175594][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.185593][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 358.196008][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.205816][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 358.217094][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.226971][T10251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 358.237375][T10251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 358.250420][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 358.259496][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 358.329574][T10279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 358.351541][T10279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 358.360306][T10279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 358.380891][T10279] device bridge_slave_0 left promiscuous mode
[ 358.387841][T10279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 358.403667][T10279] device bridge_slave_1 left promiscuous mode
[ 358.410438][T10279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 358.430114][T10279] bond0: (slave bond_slave_0): Releasing backup interface
[ 358.469827][T10279] bond0: (slave bond_slave_1): Releasing backup interface
[ 358.553052][T10279] team0: Port device team_slave_0 removed
[ 358.601409][T10279] team0: Port device team_slave_1 removed
[ 358.612043][T10279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 358.620043][T10279] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 358.634573][T10279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 358.642345][T10279] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:20 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x24, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:20 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa342, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:20 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40104, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d1400"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:20 executing program 3:
syz_read_part_table(0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f00000000c0)="020182ffffff0a000000ff45ac000000000005000000060000000000024000ffffff82000000e100000088770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0xffffffff}])
08:45:20 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xae61, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r`\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 358.727157][T10285] loop2: detected capacity change from 0 to 81
[ 358.733853][T10287] loop1: detected capacity change from 0 to 87
[ 358.735316][T10290] loop3: detected capacity change from 0 to 264192
[ 358.740643][T10289] loop4: detected capacity change from 0 to 512
[ 358.776199][T10285] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 358.784432][T10289] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 358.796501][T10287] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 358.796748][T10290] loop3: p1 p2 < > p3 p4 < p5 p6 >
[ 358.812429][T10290] loop3: p1 size 11290111 extends beyond EOD, truncated
[ 358.821101][T10285] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 358.830686][T10287] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 358.832220][T10290] loop3: p3 size 1912633224 extends beyond EOD, truncated
[ 358.850983][T10289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 358.853475][T10290] loop3: p5 size 11290111 extends beyond EOD, truncated
08:45:20 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x24, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 358.885616][T10290] loop3: p6 size 1912633224 extends beyond EOD, truncated
[ 358.893577][T10285] loop2: detected capacity change from 0 to 81
[ 358.900769][T10285] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 358.916909][T10287] loop1: detected capacity change from 0 to 87
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d1a0100"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 358.946349][T10287] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 358.968976][T10285] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 358.981945][T10290] loop3: detected capacity change from 0 to 264192
08:45:20 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000300"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:20 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40105, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 359.013589][T10287] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 359.062063][T10290] loop3: p1 p2 < > p3 p4 < p5 p6 >
08:45:20 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xae62, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:20 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa34e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 359.090597][T10303] loop4: detected capacity change from 0 to 512
[ 359.098182][T10290] loop3: p1 size 11290111 extends beyond EOD, truncated
[ 359.116062][T10303] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000500"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 359.143181][T10307] loop2: detected capacity change from 0 to 81
[ 359.145861][T10305] loop1: detected capacity change from 0 to 87
[ 359.157157][T10290] loop3: p3 size 1912633224 extends beyond EOD, truncated
[ 359.167576][T10303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 359.168365][T10290] loop3: p5 size 11290111 extends beyond EOD, truncated
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000600"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 359.188928][T10305] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 359.189390][T10290] loop3: p6 size 1912633224 extends beyond EOD, truncated
[ 359.234687][T10307] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 359.265286][T10305] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 359.274768][T10307] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:20 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000003900)={'ip6_vti0\x00', &(0x7f0000003880)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x1, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x80, 0x7800, 0x20ab, 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003940)=@RTM_NEWMDB={0x98, 0x54, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x2, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@multicast2, 0x86dd}}}]}, 0x98}}, 0x4000080)
08:45:20 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4011e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\a\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 359.294966][ T1439] loop3: p1 p2 < > p3 p4 < p5 p6 >
[ 359.303854][ T1439] loop3: p1 size 11290111 extends beyond EOD, truncated
[ 359.319877][T10318] loop4: detected capacity change from 0 to 512
[ 359.335085][T10305] loop1: detected capacity change from 0 to 87
08:45:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\t\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 359.335246][ T1439] loop3: p3 size 1912633224 extends beyond EOD, truncated
[ 359.357652][T10318] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 359.368141][T10305] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 359.377310][ T1439] loop3: p5 size 11290111 extends beyond EOD, truncated
[ 359.386367][T10307] loop2: detected capacity change from 0 to 81
[ 359.398208][ T1439] loop3: p6 size 1912633224 extends beyond EOD, truncated
[ 359.399891][T10305] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 359.415874][T10307] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 359.424959][T10318] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 359.433403][T10307] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\n\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 359.456887][ T1849] device hsr_slave_0 left promiscuous mode
[ 359.470717][ T1849] device hsr_slave_1 left promiscuous mode
[ 359.484287][ T1849] device veth1_macvtap left promiscuous mode
[ 359.490360][ T1849] device veth0_macvtap left promiscuous mode
[ 359.496385][ T1849] device veth1_vlan left promiscuous mode
[ 359.502152][ T1849] device veth0_vlan left promiscuous mode
[ 359.555595][T10327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10327 comm=syz-executor.3
[ 359.568735][ T24] audit: type=1400 audit(1638348321.123:786): avc: denied { write } for pid=10326 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 359.775644][ T1849] bond0 (unregistering): Released all slaves
[ 359.849082][T10327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10327 comm=syz-executor.3
[ 361.178165][T10333] chnl_net:caif_netlink_parms(): no params data found
[ 361.212766][T10333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 361.219888][T10333] bridge0: port 1(bridge_slave_0) entered disabled state
[ 361.227794][T10333] device bridge_slave_0 entered promiscuous mode
[ 361.235021][T10333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 361.242045][T10333] bridge0: port 2(bridge_slave_1) entered disabled state
[ 361.249711][T10333] device bridge_slave_1 entered promiscuous mode
[ 361.267618][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 361.278138][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 361.297345][T10333] team0: Port device team_slave_0 added
[ 361.303809][T10333] team0: Port device team_slave_1 added
[ 361.320431][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 361.327402][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 361.353641][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 361.365362][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 361.372296][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 361.398259][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 361.422732][T10333] device hsr_slave_0 entered promiscuous mode
[ 361.429553][T10333] device hsr_slave_1 entered promiscuous mode
[ 361.436053][T10333] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 361.443592][T10333] Cannot create hsr debugfs directory
[ 361.500532][T10333] 8021q: adding VLAN 0 to HW filter on device bond0
[ 361.511256][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 361.519494][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 361.528545][T10333] 8021q: adding VLAN 0 to HW filter on device team0
[ 361.544842][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 361.553434][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 361.562042][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 361.569092][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 361.576921][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 361.585595][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 361.594112][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 361.601146][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 361.609155][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 361.617918][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 361.626933][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 361.635410][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 361.644146][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 361.653972][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 361.666912][T10333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 361.677268][T10333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 361.691119][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 361.699254][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 361.707434][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 361.715901][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 361.730650][T10333] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 361.741360][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 361.749466][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 361.757252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 361.816488][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 361.878290][T10333] device veth0_vlan entered promiscuous mode
[ 361.884994][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 361.893689][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 361.902722][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 361.912705][T10333] device veth1_vlan entered promiscuous mode
[ 361.922068][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 361.938307][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 361.946701][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 361.957491][T10333] device veth0_macvtap entered promiscuous mode
[ 361.966081][T10333] device veth1_macvtap entered promiscuous mode
[ 361.978241][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 361.988828][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 361.998689][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 362.009131][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.018962][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 362.029395][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.039221][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 362.049642][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.059466][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 362.069920][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.085237][T10333] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 362.092906][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 362.101634][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 362.110271][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 362.119604][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 362.130052][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.139915][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 362.150334][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.160174][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 362.170630][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.180503][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 362.190944][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.200854][T10333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 362.211542][T10333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 362.224277][T10333] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 362.232334][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 362.241271][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 362.306180][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 362.327557][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 362.336380][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 362.356922][T10361] device bridge_slave_0 left promiscuous mode
[ 362.363650][T10361] bridge0: port 1(bridge_slave_0) entered disabled state
[ 362.378179][T10361] device bridge_slave_1 left promiscuous mode
[ 362.385637][T10361] bridge0: port 2(bridge_slave_1) entered disabled state
[ 362.408090][T10361] bond0: (slave bond_slave_0): Releasing backup interface
[ 362.446576][T10361] bond0: (slave bond_slave_1): Releasing backup interface
[ 362.526045][T10361] team0: Port device team_slave_0 removed
[ 362.574126][T10361] team0: Port device team_slave_1 removed
[ 362.585057][T10361] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 362.592709][T10361] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 362.607086][T10361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 362.614943][T10361] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:24 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:24 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40120, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa3d0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xae80, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\v\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:24 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000003900)={'ip6_vti0\x00', &(0x7f0000003880)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x1, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x80, 0x7800, 0x20ab, 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003940)=@RTM_NEWMDB={0x98, 0x54, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x2, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@multicast2, 0x86dd}}}]}, 0x98}}, 0x4000080)
[ 362.689393][T10366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10366 comm=syz-executor.3
[ 362.694380][T10368] loop2: detected capacity change from 0 to 81
[ 362.705808][T10369] loop1: detected capacity change from 0 to 87
[ 362.712881][T10371] loop4: detected capacity change from 0 to 512
[ 362.726937][T10371] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\f\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 362.729337][T10369] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 362.757982][T10368] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 362.773103][T10369] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 362.786786][T10368] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 362.802338][T10371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:24 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x0]}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:24 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40121, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000f00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:24 executing program 3:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40120, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 362.836378][T10368] loop2: detected capacity change from 0 to 81
[ 362.843047][T10368] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 362.843252][T10369] loop1: detected capacity change from 0 to 87
[ 362.865850][T10369] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 362.894637][T10382] loop3: detected capacity change from 0 to 512
[ 362.902010][T10382] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 362.911889][T10382] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 362.923596][T10369] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:24 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xec, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xc8, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xec}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:24 executing program 3:
r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x6be5, 0x10}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x0)
set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0xd7)
set_mempolicy(0x8000, &(0x7f0000000080)=0x1435, 0xffff)
r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9)
syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0xa, 0xfff, &(0x7f0000000140)=""/65, 0x41, 0x5, 0x1}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c0001000000000000000000000000000000000001"], 0x88c}}, 0x0)
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d001100"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 362.941991][T10368] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 362.946493][T10385] loop4: detected capacity change from 0 to 512
[ 362.977248][T10385] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:24 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa3d1, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaec0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d001400"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:24 executing program 3:
r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x6be5, 0x10}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, r0, 0x0)
set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0xd7)
set_mempolicy(0x8000, &(0x7f0000000080)=0x1435, 0xffff)
r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9)
syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0xa, 0xfff, &(0x7f0000000140)=""/65, 0x41, 0x5, 0x1}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c0001000000000000000000000000000000000001"], 0x88c}}, 0x0)
[ 363.078829][T10385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 363.118748][T10397] loop1: detected capacity change from 0 to 87
[ 363.139796][T10395] loop2: detected capacity change from 0 to 81
[ 363.186739][T10395] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 363.222204][T10397] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:24 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40122, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d011a00"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 363.280441][T10395] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 363.295958][T10397] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 363.318340][T10406] loop4: detected capacity change from 0 to 512
08:45:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d884700"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 363.343971][T10406] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 363.358522][T10397] loop1: detected capacity change from 0 to 87
[ 363.367453][T10397] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 363.368364][T10395] loop2: detected capacity change from 0 to 81
[ 363.383224][ T2005] device hsr_slave_0 left promiscuous mode
[ 363.395658][ T2005] device hsr_slave_1 left promiscuous mode
[ 363.395687][T10397] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 363.412614][T10395] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 363.421924][ T2005] device veth1_macvtap left promiscuous mode
[ 363.428031][ T2005] device veth0_macvtap left promiscuous mode
[ 363.434158][ T2005] device veth1_vlan left promiscuous mode
[ 363.439958][ T2005] device veth0_vlan left promiscuous mode
08:45:25 executing program 3:
r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
r1 = shmat(r0, &(0x7f00000b6000/0x3000)=nil, 0x6000)
r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
r4 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmat(r4, &(0x7f00003fa000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x2000)
shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmat(r3, &(0x7f00003fa000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmat(r2, &(0x7f0000243000/0x2000)=nil, 0x0)
shmdt(r1)
[ 363.448239][T10395] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 363.459664][T10406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:25 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaf00, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 363.533860][T10415] loop1: detected capacity change from 0 to 87
[ 363.605303][T10415] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 363.625030][T10415] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 363.657831][T10415] loop1: detected capacity change from 0 to 87
[ 363.667397][T10415] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 363.684978][T10415] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 363.830530][ T2005] bond0 (unregistering): Released all slaves
[ 365.188257][T10418] chnl_net:caif_netlink_parms(): no params data found
[ 365.224913][T10418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 365.231968][T10418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 365.239792][T10418] device bridge_slave_0 entered promiscuous mode
[ 365.247130][T10418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 365.254154][T10418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 365.262245][T10418] device bridge_slave_1 entered promiscuous mode
[ 365.282862][T10418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 365.293498][T10418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 365.312381][T10418] team0: Port device team_slave_0 added
[ 365.320011][T10418] team0: Port device team_slave_1 added
[ 365.334298][T10418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 365.341299][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 365.367371][T10418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 365.379981][T10418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 365.387139][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 365.413061][T10418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 365.437645][T10418] device hsr_slave_0 entered promiscuous mode
[ 365.444261][T10418] device hsr_slave_1 entered promiscuous mode
[ 365.450728][T10418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 365.458321][T10418] Cannot create hsr debugfs directory
[ 365.497243][T10418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 365.504318][T10418] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 365.511610][T10418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 365.518649][T10418] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 365.548865][T10418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 365.559725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 365.568206][ T5] bridge0: port 1(bridge_slave_0) entered disabled state
[ 365.576436][ T5] bridge0: port 2(bridge_slave_1) entered disabled state
[ 365.585838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 365.597020][T10418] 8021q: adding VLAN 0 to HW filter on device team0
[ 365.607270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 365.615794][ T5] bridge0: port 1(bridge_slave_0) entered blocking state
[ 365.622875][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 365.643126][T10418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 365.653505][T10418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 365.668885][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 365.677436][ T77] bridge0: port 2(bridge_slave_1) entered blocking state
[ 365.684545][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 365.693652][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 365.702445][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 365.711570][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 365.720030][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 365.734836][T10418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 365.743979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 365.751841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 365.759398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 365.767322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 365.817311][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 365.875794][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 365.884442][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 365.893850][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 365.901998][T10418] device veth0_vlan entered promiscuous mode
[ 365.914590][T10418] device veth1_vlan entered promiscuous mode
[ 365.928328][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 365.937625][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 365.946105][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 365.955620][T10418] device veth0_macvtap entered promiscuous mode
[ 365.963545][T10418] device veth1_macvtap entered promiscuous mode
[ 365.975892][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 365.986521][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 365.996680][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 366.007114][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.016946][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 366.027370][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.037223][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 366.047686][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.057505][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 366.067915][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.081169][T10418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 366.089542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 366.099050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 366.107929][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 366.118393][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.128248][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 366.138674][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.148489][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 366.159617][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.169422][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 366.180761][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.190586][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 366.201081][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 366.214365][T10418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 366.223142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 366.296102][T10446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 366.318866][T10446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 366.328794][T10446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 366.348440][T10446] device bridge_slave_0 left promiscuous mode
[ 366.355146][T10446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 366.371580][T10446] device bridge_slave_1 left promiscuous mode
[ 366.378512][T10446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 366.398848][T10446] bond0: (slave bond_slave_0): Releasing backup interface
[ 366.441060][T10446] bond0: (slave bond_slave_1): Releasing backup interface
[ 366.524776][T10446] team0: Port device team_slave_0 removed
[ 366.575549][T10446] team0: Port device team_slave_1 removed
[ 366.585842][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 366.593483][T10446] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 366.607779][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 366.615819][T10446] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:28 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="480000001500e702cc13095f9f95274b02060a845865400440010040030000007fab078a6a3ed47a56aa68c6f8c36d96bd7c497626ff4310e68b", 0x3a}], 0x1}, 0x20000001)
08:45:28 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa3d2, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:28 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40123, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:28 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaf40, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:28 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xec, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xc8, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xec}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d884800"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 366.689161][T10452] loop4: detected capacity change from 0 to 512
[ 366.693196][T10455] loop2: detected capacity change from 0 to 81
[ 366.702184][T10450] loop1: detected capacity change from 0 to 87
[ 366.711273][T10455] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 366.726914][T10452] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:28 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xec, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xc8, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xec}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\reX\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 366.735222][T10450] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 366.743622][T10455] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 366.775582][T10452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00`\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:28 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40124, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 366.782384][T10450] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 366.806322][T10455] loop2: detected capacity change from 0 to 81
[ 366.826712][T10455] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 366.835283][T10455] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 366.871450][T10450] loop1: detected capacity change from 0 to 87
[ 366.902262][T10468] loop4: detected capacity change from 0 to 512
08:45:28 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa400, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 366.915993][T10450] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 366.934638][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 366.944843][T10450] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 366.954629][T10470] loop2: detected capacity change from 0 to 82
[ 366.962876][T10468] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 366.985789][T10470] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 366.989069][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 366.997636][T10470] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.003447][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
08:45:28 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xaf80, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.029095][T10468] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:28 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40125, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.075183][T10464] device bridge_slave_0 left promiscuous mode
[ 367.077374][T10470] loop2: detected capacity change from 0 to 82
[ 367.081931][T10464] bridge0: port 1(bridge_slave_0) entered disabled state
[ 367.097143][T10470] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 367.116120][T10473] loop1: detected capacity change from 0 to 87
[ 367.124088][T10470] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.136619][T10473] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 367.146120][T10473] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.163772][T10464] device bridge_slave_1 left promiscuous mode
08:45:28 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa42c, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.170721][T10464] bridge0: port 2(bridge_slave_1) entered disabled state
[ 367.194197][T10475] loop4: detected capacity change from 0 to 512
[ 367.207835][T10475] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 367.211132][T10477] loop2: detected capacity change from 0 to 82
08:45:28 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40140, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.231252][T10475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 367.232384][T10477] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 367.254567][T10473] loop1: detected capacity change from 0 to 87
[ 367.262487][T10464] bond0: (slave bond_slave_0): Releasing backup interface
[ 367.274032][T10473] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 367.282815][T10473] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.312174][T10477] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:28 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xafc0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.344349][T10480] loop4: detected capacity change from 0 to 512
[ 367.368764][T10464] bond0: (slave bond_slave_1): Releasing backup interface
[ 367.384153][T10480] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 367.398628][T10477] loop2: detected capacity change from 0 to 82
[ 367.409768][T10482] loop1: detected capacity change from 0 to 87
[ 367.416962][T10477] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 367.427114][T10482] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 367.428675][T10477] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.446774][T10482] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.459265][T10480] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 367.509097][T10482] loop1: detected capacity change from 0 to 87
[ 367.512474][T10464] team0: Port device team_slave_0 removed
[ 367.522336][T10482] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 367.553411][T10482] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.604348][T10464] team0: Port device team_slave_1 removed
[ 367.635383][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 367.642924][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0
08:45:29 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xec, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xc8, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xec}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:29 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40141, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.652872][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 367.660357][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:29 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xec, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xc8, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xec}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:29 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa42d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:29 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xafde, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\rXe\x00'/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 367.711141][T10487] loop4: detected capacity change from 0 to 512
[ 367.739809][T10487] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:29 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 367.775067][T10490] loop2: detected capacity change from 0 to 82
[ 367.786804][T10493] loop1: detected capacity change from 0 to 87
[ 367.798242][T10490] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d008100"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 367.819146][T10493] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 367.837952][T10487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 367.864731][T10490] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 367.884802][T10493] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:29 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xec, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xc8, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xec}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d478800"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 367.953467][T10490] loop2: detected capacity change from 0 to 82
[ 367.962840][T10493] loop1: detected capacity change from 0 to 87
[ 367.989909][T10493] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:29 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40142, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 367.999608][T10490] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 368.029944][T10490] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 368.056544][T10493] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d488800"/20, @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:29 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa42e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:29 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1}, 0x18)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000e00)=ANY=[@ANYBLOB="640100002c00000226bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="06000b000c07000002000d000d0001006d61746368616c6c000000002001020004010200000117000b00010073696d706c6500005c000280060003002d0000000b0003002a265d5e262a0000060003002c0000000a03002523000008000300726177000600030027000000180002000300000006000000030000007b7400000100000079000600c3ff592bc712d864e8d215f9a2af37ffc4ce358277b6c7a2a4584dbb490c56007befa7eeb463298b2dfd9692e4e512388f4de8d667ea6025038d965ad4bd03934e424f2176cb752b31bdd42c390058e531063286c1a6a4a6c2f2ae34e904bbe40b1f92b78615d8f8b92834614e8c0cf61c098e19970000000c00070000000000000000000c000800010000000300000008000300030000003ea588da48b1485f4f1121f882080001000d000600080003000800000006000500017f00000600050000fc00"/345], 0x164}, 0x1, 0x0, 0x0, 0x8883}, 0x40090)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@newchain={0x770, 0x64, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xb}, {0x2, 0x9}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x72c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_MATCHALL_ACT={0x718, 0x2, [@m_ife={0x19c, 0x17, 0x0, 0x0, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x20000000, 0x3, 0x40}, 0x7f}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x200}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x3, 0x1, 0x7}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xaf, 0x6, "61f64209561387e1b2681226e71d2307f74047ad2ab326efd595188263a52107e4736e91178e75eb03d2f4fe59c963db8cbbcf730d2f52c7b229ad71ccb0ec89718a1350c3b1d2209eda35c7c0ecdb6c229d0eb3bb235e6f83145b5e260a11526db874e7bcf7062dee07bcf8b53ad6443a547cdaa8dda30c2baf327806f4d848e59c2ba0fc643d7c90f920ee4564b22dfaf853f00c4d1873a271efcdc244d88d344808fcedd918c1e5891f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x114, 0x1e, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xbab2, 0x1000, 0x7, 0x3ff, 0x8000}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0xfffffffc, 0x2, 0x101, 0x400}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0xdd, 0xffffffffffffffff, 0x8, 0x3}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x0, 0xcba, 0x200}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffe01, 0x0, 0x4, 0x9}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x0, 0x80, 0x7}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x5, 0x7, 0x7ff}, 0x15}}]}, {0x22, 0x6, "6ff7746c020fccb121e39c35efeb37a8d73ab31297d31efb826fd7988e1d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x74, 0x18, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x43, 0x6, "c50a0aeae6d0f582af77d445d1f266317473bfaae33d5bdbe5fe29cc08bf86532b56f67b19496a7f0890f820069c5948373cb2b36cbdf68794ef8cd9f9f386"}, {0xc}, {0xc, 0x8, {0x1, 0xd03f18e428391493}}}}, @m_xt={0x134, 0x18, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x400}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_xt={0x1b4, 0x9, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10a, 0x6, {0x4, 'security\x00', 0x0, 0x4, "dee4881e05a96dcb80625aad513f4a6f7d41dae64832376491aadfc9e2c71e39854b3251906c1f03eb543c80e4a97a404f6da6ac6a167fc33370f9a35305bec7b8306806e8372dcdc6cbe85fea2c4be0071c3c0da9e9e62b7a43dd0d87025c22618918362bb43ee0db210a16a4e33697c5098f2cb9d26dd2b96abef46b97239c49d9d4967c3b4f9b8b4de6c208d2b8f753f9aba23dba020e77ca3ae513c993b579dc70a25e42a03fac7d17ac70ce316d8c380c4f4730b1dcecf925950e74fb0deb8dd7113f7fd67547efcd2dcc7a9484f4930a3fcf99d89e0334557a56d28892"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x4b, 0x6, "1d360c8cf0bee1b2df1fa27f5d37d25407f76443a554b1c3a9cec4db589213f1275999fe7bae0d25126e1bc986adf6b3defbc9ae9e236c87c8db571b630fabb94b2420184e3fc1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x108, 0x15, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xa95, 0x0, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2e, 0x4, 0x10000000, 0x1, 0x3ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xaa5, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12f9, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc2, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x23b2, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b41, 0x2}}]}, {0x6e, 0x6, "68a5787be826aaceaa258588c24a3f8e5a1e4fe959fe5b705de24204036c5d9140a666c00d7629e9d0e7ce39f304275ad04485f7c3c1b192e5f438017ea70e6399ec5230c75fa369848cf4fa7ee2df198693901d091e6307ac79bd038dbdb93498211de5294c1c600199"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xd29}]}, 0x770}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004084)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r9, 0x0, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f00000001c0)={0x0}}, 0x0)
[ 368.081766][T10503] loop4: detected capacity change from 0 to 512
[ 368.107210][T10503] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:29 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xafdf, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 368.160890][T10503] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 368.191064][T10510] loop2: detected capacity change from 0 to 82
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d004003000000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 368.206730][T10511] loop1: detected capacity change from 0 to 87
[ 368.213964][T10510] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000340000000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000010000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 368.276970][T10510] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 368.294909][T10511] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 368.368732][T10510] loop2: detected capacity change from 0 to 82
[ 368.385775][T10511] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 368.395055][T10510] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 368.423664][T10510] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 368.436584][ T4515] device hsr_slave_0 left promiscuous mode
[ 368.445974][ T4515] device hsr_slave_1 left promiscuous mode
[ 368.447936][T10511] loop1: detected capacity change from 0 to 87
[ 368.465723][T10511] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 368.476572][ T4515] device veth1_macvtap left promiscuous mode
[ 368.482670][ T4515] device veth0_macvtap left promiscuous mode
[ 368.484853][T10511] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 368.488736][ T4515] device veth1_vlan left promiscuous mode
[ 368.503809][ T4515] device veth0_vlan left promiscuous mode
[ 368.821154][ T4515] bond0 (unregistering): Released all slaves
[ 369.873478][T10522] chnl_net:caif_netlink_parms(): no params data found
[ 369.913797][T10522] bridge0: port 1(bridge_slave_0) entered blocking state
[ 369.921000][T10522] bridge0: port 1(bridge_slave_0) entered disabled state
[ 369.928968][T10522] device bridge_slave_0 entered promiscuous mode
[ 369.936372][T10522] bridge0: port 2(bridge_slave_1) entered blocking state
[ 369.943396][T10522] bridge0: port 2(bridge_slave_1) entered disabled state
[ 369.951309][T10522] device bridge_slave_1 entered promiscuous mode
[ 369.977540][T10522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 369.989315][T10522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 370.009623][T10522] team0: Port device team_slave_0 added
[ 370.019605][T10522] team0: Port device team_slave_1 added
[ 370.036228][T10522] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 370.043186][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 370.069481][T10522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 370.082678][ T4515] device hsr_slave_0 left promiscuous mode
[ 370.088953][ T4515] device hsr_slave_1 left promiscuous mode
[ 370.099146][ T4515] device veth1_macvtap left promiscuous mode
[ 370.105206][ T4515] device veth0_macvtap left promiscuous mode
[ 370.111189][ T4515] device veth1_vlan left promiscuous mode
[ 370.116954][ T4515] device veth0_vlan left promiscuous mode
[ 370.241807][ T4515] bond0 (unregistering): Released all slaves
[ 370.339509][T10522] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 370.346595][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 370.372503][T10522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 370.413943][T10522] device hsr_slave_0 entered promiscuous mode
[ 370.428101][T10522] device hsr_slave_1 entered promiscuous mode
[ 370.549248][T10522] 8021q: adding VLAN 0 to HW filter on device bond0
[ 370.573990][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 370.583817][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 370.592807][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 370.603610][T10522] 8021q: adding VLAN 0 to HW filter on device team0
[ 370.630867][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 370.639453][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 370.648768][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 370.655811][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 370.686679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 370.694729][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 370.703388][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 370.725892][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 370.732938][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 370.755895][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 370.775152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 370.797036][T10536] chnl_net:caif_netlink_parms(): no params data found
[ 370.826660][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 370.884238][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 370.895844][T10522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 370.907371][T10522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 370.915353][T10536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 370.922455][T10536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 370.931653][T10536] device bridge_slave_0 entered promiscuous mode
[ 370.939330][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 370.956462][T10536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 370.963506][T10536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 370.972031][T10536] device bridge_slave_1 entered promiscuous mode
[ 370.984956][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 370.992478][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 371.014882][T10522] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 371.046878][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 371.065211][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 371.096164][T10536] team0: Port device team_slave_0 added
[ 371.110604][T10536] team0: Port device team_slave_1 added
[ 371.134598][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 371.143385][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 371.152708][T10536] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 371.159694][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 371.185651][T10536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 371.204506][T10536] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 371.211509][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 371.237433][T10536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 371.269113][T10536] device hsr_slave_0 entered promiscuous mode
[ 371.282617][T10536] device hsr_slave_1 entered promiscuous mode
[ 371.290339][T10536] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 371.297921][T10536] Cannot create hsr debugfs directory
[ 371.309559][T10522] device veth0_vlan entered promiscuous mode
[ 371.320209][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 371.329543][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 371.340307][T10522] device veth1_vlan entered promiscuous mode
[ 371.348113][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 371.356133][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 371.363994][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 371.378436][T10522] device veth0_macvtap entered promiscuous mode
[ 371.389964][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 371.398388][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 371.406956][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 371.425207][T10522] device veth1_macvtap entered promiscuous mode
[ 371.437789][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 371.446019][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 371.460856][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 371.471360][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.481198][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 371.491616][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.501469][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 371.511936][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.521768][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 371.532225][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.544118][T10522] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 371.553385][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 371.563852][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.573771][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 371.584253][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.594164][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 371.604587][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.614452][T10522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 371.624866][T10522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 371.635891][T10522] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 371.643607][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 371.652118][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 371.660861][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 371.669392][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 371.714586][T10536] 8021q: adding VLAN 0 to HW filter on device bond0
[ 371.735831][T10536] 8021q: adding VLAN 0 to HW filter on device team0
[ 371.744757][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 371.754753][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 371.766461][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 371.774155][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 371.782881][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 371.791444][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 371.798568][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 371.836149][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 371.856794][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 371.865913][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 371.882977][T10565] device bridge_slave_0 left promiscuous mode
[ 371.889577][T10565] bridge0: port 1(bridge_slave_0) entered disabled state
[ 371.903703][T10565] device bridge_slave_1 left promiscuous mode
[ 371.910373][T10565] bridge0: port 2(bridge_slave_1) entered disabled state
[ 371.929369][T10565] bond0: (slave bond_slave_0): Releasing backup interface
[ 371.963178][T10565] bond0: (slave bond_slave_1): Releasing backup interface
[ 372.037719][T10565] team0: Port device team_slave_0 removed
[ 372.087890][T10565] team0: Port device team_slave_1 removed
[ 372.098091][T10565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 372.106123][T10565] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 372.120164][T10565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 372.128163][T10565] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:33 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:33 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4017f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000020000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:33 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa440, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:33 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xafe0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 372.172078][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 372.179946][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 372.200331][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 372.216244][T10569] loop2: detected capacity change from 0 to 82
[ 372.216924][T10570] loop4: detected capacity change from 0 to 512
[ 372.231189][T10569] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 372.233174][T10573] loop1: detected capacity change from 0 to 87
[ 372.245798][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 372.252826][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 372.261568][T10570] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 372.270023][T10569] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 372.270628][T10573] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 372.289194][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 372.297996][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 372.307196][T10573] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 372.316740][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 372.325014][T10570] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 372.343334][T10569] loop2: detected capacity change from 0 to 82
[ 372.352327][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 372.364751][T10569] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:45:33 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4018b, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 372.381454][T10536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 372.397872][T10573] loop1: detected capacity change from 0 to 87
[ 372.405668][T10536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 372.412916][T10569] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 372.425395][T10573] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000030000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 372.452639][T10573] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 372.487342][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 372.501096][T10579] loop4: detected capacity change from 0 to 512
[ 372.502754][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 372.524153][T10536] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 372.543618][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 372.556392][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 372.583387][T10579] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 372.612278][T10579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 372.671204][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 372.679921][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 372.749935][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 372.759512][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 372.769038][T10536] device veth0_vlan entered promiscuous mode
[ 372.777129][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 372.784963][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 372.798933][T10536] device veth1_vlan entered promiscuous mode
[ 372.811411][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 372.820966][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 372.828931][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 372.838750][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 372.848184][T10536] device veth0_macvtap entered promiscuous mode
[ 372.862549][T10536] device veth1_macvtap entered promiscuous mode
[ 372.873651][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 372.884222][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 372.894044][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 372.904457][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 372.914330][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 372.924939][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 372.934838][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 372.945282][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 372.956728][T10536] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 372.964555][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 372.972797][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 372.980919][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 372.989471][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 372.999166][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 373.009612][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 373.019497][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 373.029940][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 373.039763][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 373.050183][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 373.059983][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 373.070431][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 373.082800][T10536] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 373.094302][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 373.103110][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 373.145877][ T24] audit: type=1400 audit(1638348334.713:787): avc: denied { ioctl } for pid=10596 comm="syz-executor.3" path="socket:[55134]" dev="sockfs" ino=55134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 373.146284][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
08:45:34 executing program 3:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4018b, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:34 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa44a, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:34 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:34 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 373.170899][ T24] audit: type=1400 audit(1638348334.713:788): avc: denied { bind } for pid=10596 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 373.207606][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
08:45:34 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x401b4, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000040000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 373.245669][T10601] loop2: detected capacity change from 0 to 82
[ 373.253527][ T1835] device hsr_slave_0 left promiscuous mode
[ 373.261279][T10603] loop1: detected capacity change from 0 to 88
[ 373.263212][T10601] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 373.283283][T10605] loop3: detected capacity change from 0 to 512
[ 373.290469][T10609] loop4: detected capacity change from 0 to 512
[ 373.290492][T10605] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 373.305008][ T1835] device hsr_slave_1 left promiscuous mode
[ 373.311106][T10601] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 373.336915][T10609] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 373.346720][T10605] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 373.350900][T10603] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 373.367265][ T1835] device veth1_macvtap left promiscuous mode
[ 373.373339][ T1835] device veth0_macvtap left promiscuous mode
[ 373.375176][T10603] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 373.379551][ T1835] device veth1_vlan left promiscuous mode
[ 373.394511][ T1835] device veth0_vlan left promiscuous mode
[ 373.408002][T10601] loop2: detected capacity change from 0 to 82
[ 373.416634][T10609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 373.431580][T10601] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 373.448793][T10603] loop1: detected capacity change from 0 to 88
[ 373.451186][T10601] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 373.465942][T10603] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:35 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x401f8, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x0, 0x100, 0x7]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x7db7, 0x0, 0x0, 0x0, @struct={0x0, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x3ff, 0x0, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x0, @usage, 0x8, 0x0, [0x0, 0x0, 0x0, 0x1, 0x800, 0x3f]}, {0x0, 0xffffffffffffffff, 0x100000001}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x80, @usage, 0x0, 0x0, 0x36dd, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @struct={0x435}, 0x0, 0x9, 0xc48, 0x2, 0x0, 0x10001, 0x0, @usage, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x1, 0x3fe000000]}, {0x1, @struct={0x4, 0xa}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x0, 0x40, @usage=0x8, 0x0, 0x1, [0x0, 0x3, 0x1ff, 0x3ff, 0x0, 0xd781]}, {0x1ff, 0x7, 0x1000}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x101, 0x0, [0x101, 0x0, 0x10001, 0x1], [0x0, 0x0, 0xe8, 0x3ff, 0x200, 0x2, 0x2, 0x9, 0x0, 0x2cbb, 0x0, 0x0, 0x5, 0x2, 0x0, 0xa636, 0x0, 0xd4c, 0x0, 0x0, 0x4, 0xd, 0x1, 0x6, 0x0, 0xa00000000000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x80, 0x80, 0x10000, 0x2, 0x0, 0x0, 0x2, 0x3a95b9c2, 0x7a3c, 0x0, 0x1b, 0xd4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x19, 0x86ee, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x3f, 0x5, 0x0, 0x0, 0x3, 0x40, 0x0, 0x3, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x5, 0x5, 0x2, 0x8, 0x0, 0x56f, 0x2, 0x4, 0x9, 0x10000, 0x10000, 0x7fff, 0x7, 0x99af, 0xfa4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x1, 0x400, 0x6, 0x0, 0x100000001, 0x60000, 0x0, 0x40, 0x3, 0x0, 0x100000001, 0x41, 0x0, 0x2, 0x4, 0x0, 0x6, 0x2, 0x9, 0xd84fe6a, 0x20, 0x81fa]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={r1, 0x101, 0x0, [0x101, 0x0, 0x10001, 0x1], [0x0, 0x0, 0xe8, 0x3ff, 0x200, 0x2, 0x2, 0x9, 0x0, 0x2cbb, 0x0, 0x0, 0x5, 0x2, 0x0, 0xa636, 0x0, 0xd4c, 0x0, 0x0, 0x4, 0xd, 0x1, 0x6, 0x0, 0xa00000000000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x80, 0x80, 0x10000, 0x2, 0x0, 0x0, 0x2, 0x3a95b9c2, 0x7a3c, 0x0, 0x1b, 0xd4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x19, 0x86ee, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x3f, 0x5, 0x0, 0x0, 0x3, 0x40, 0x0, 0x3, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x5, 0x5, 0x2, 0x8, 0x0, 0x56f, 0x2, 0x4, 0x9, 0x10000, 0x10000, 0x7fff, 0x7, 0x99af, 0xfa4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x1, 0x400, 0x6, 0x0, 0x100000001, 0x60000, 0x0, 0x40, 0x3, 0x0, 0x100000001, 0x41, 0x0, 0x2, 0x4, 0x0, 0x6, 0x2, 0x9, 0xd84fe6a, 0x20, 0x81fa]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000a40)={0xa, 0x0, {0x11, @usage=0x4, 0x0, 0xffffffff, 0x0, 0xffffffffffff0000, 0x5, 0x8001, 0x60, @usage, 0xfffffffe, 0x0, [0x4, 0x0, 0xff, 0x6bf, 0x1, 0x100000001]}, {0xfff, @struct={0xfffffffa, 0x5}, r0, 0x400, 0x3, 0x8001, 0x7, 0xfe4, 0x804, @usage=0x100, 0x80000000, 0x80, [0xfffffffffffffff8, 0x5, 0x2, 0x8, 0xff, 0x8]}, {0x6, @struct={0x7fffffff, 0x80}, r1, 0xfffffffffffffe9d, 0x4, 0x1f, 0x100000001, 0x81, 0x75, @usage=0x2, 0x22a, 0xca2, [0x401, 0x1, 0x5, 0x7, 0xfffffffffffffffa, 0x9]}, {0x75, 0x8bc, 0x8}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x4, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000000940)=""/157, 0x9d}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x2, 0x20, 0x0, 0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000003440)={{r2}, 0x0, 0xc, @inherit={0x78, 0x0}, @devid})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="018000000400000000000000", @ANYRES32, @ANYRES32])
sched_setattr(0xffffffffffffffff, &(0x7f00000007c0)={0x38, 0x1, 0x34, 0x7, 0x5, 0x3, 0xff, 0x3ff, 0x0, 0x8}, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x8, 0x8, 0x6, 0x5dbf6586, 0x7, 0x51, 0x6, 0x1800}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8)
clone(0xf70a86956630e51d, 0x0, 0x0, 0x0, 0x0)
[ 373.495296][T10603] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
08:45:35 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb040, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:35 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa44d, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 373.571464][ C1] sd 0:0:1:0: tag#6802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 373.582642][ C1] sd 0:0:1:0: tag#6802 CDB: opcode=0xe5 (vendor)
[ 373.589024][ C1] sd 0:0:1:0: tag#6802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 373.598103][ C1] sd 0:0:1:0: tag#6802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 373.607156][ C1] sd 0:0:1:0: tag#6802 CDB[20]: ba
[ 373.612980][T10615] loop1: detected capacity change from 0 to 88
[ 373.629211][T10617] loop2: detected capacity change from 0 to 82
[ 373.644214][T10617] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 373.656888][T10615] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 373.669660][T10615] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 373.682585][T10617] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 373.757909][T10619] loop4: detected capacity change from 0 to 512
[ 373.767109][T10617] loop2: detected capacity change from 0 to 82
[ 373.773655][T10615] loop1: detected capacity change from 0 to 88
[ 373.778083][T10619] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 373.796461][T10617] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 373.804886][T10615] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 373.817084][T10617] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 373.828127][T10615] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
08:45:35 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa44e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:35 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb080, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 373.871764][T10619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:35 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40204, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 373.948630][T10623] loop1: detected capacity change from 0 to 88
[ 373.957224][T10623] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 373.966579][T10624] loop2: detected capacity change from 0 to 82
[ 373.975556][ T1835] bond0 (unregistering): Released all slaves
[ 373.976509][T10623] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 374.006665][T10624] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 374.087543][T10624] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 374.104275][ C0] sd 0:0:1:0: tag#6803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 374.114155][ C0] sd 0:0:1:0: tag#6803 CDB: opcode=0xe5 (vendor)
[ 374.120511][ C0] sd 0:0:1:0: tag#6803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 374.129552][ C0] sd 0:0:1:0: tag#6803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 374.138625][ C0] sd 0:0:1:0: tag#6803 CDB[20]: ba
08:45:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x0, 0x100, 0x7]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x7db7, 0x0, 0x0, 0x0, @struct={0x0, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x3ff, 0x0, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x0, @usage, 0x8, 0x0, [0x0, 0x0, 0x0, 0x1, 0x800, 0x3f]}, {0x0, 0xffffffffffffffff, 0x100000001}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x80, @usage, 0x0, 0x0, 0x36dd, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @struct={0x435}, 0x0, 0x9, 0xc48, 0x2, 0x0, 0x10001, 0x0, @usage, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x1, 0x3fe000000]}, {0x1, @struct={0x4, 0xa}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x0, 0x40, @usage=0x8, 0x0, 0x1, [0x0, 0x3, 0x1ff, 0x3ff, 0x0, 0xd781]}, {0x1ff, 0x7, 0x1000}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x101, 0x0, [0x101, 0x0, 0x10001, 0x1], [0x0, 0x0, 0xe8, 0x3ff, 0x200, 0x2, 0x2, 0x9, 0x0, 0x2cbb, 0x0, 0x0, 0x5, 0x2, 0x0, 0xa636, 0x0, 0xd4c, 0x0, 0x0, 0x4, 0xd, 0x1, 0x6, 0x0, 0xa00000000000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x80, 0x80, 0x10000, 0x2, 0x0, 0x0, 0x2, 0x3a95b9c2, 0x7a3c, 0x0, 0x1b, 0xd4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x19, 0x86ee, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x3f, 0x5, 0x0, 0x0, 0x3, 0x40, 0x0, 0x3, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x5, 0x5, 0x2, 0x8, 0x0, 0x56f, 0x2, 0x4, 0x9, 0x10000, 0x10000, 0x7fff, 0x7, 0x99af, 0xfa4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x1, 0x400, 0x6, 0x0, 0x100000001, 0x60000, 0x0, 0x40, 0x3, 0x0, 0x100000001, 0x41, 0x0, 0x2, 0x4, 0x0, 0x6, 0x2, 0x9, 0xd84fe6a, 0x20, 0x81fa]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={r1, 0x101, 0x0, [0x101, 0x0, 0x10001, 0x1], [0x0, 0x0, 0xe8, 0x3ff, 0x200, 0x2, 0x2, 0x9, 0x0, 0x2cbb, 0x0, 0x0, 0x5, 0x2, 0x0, 0xa636, 0x0, 0xd4c, 0x0, 0x0, 0x4, 0xd, 0x1, 0x6, 0x0, 0xa00000000000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x80, 0x80, 0x10000, 0x2, 0x0, 0x0, 0x2, 0x3a95b9c2, 0x7a3c, 0x0, 0x1b, 0xd4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x19, 0x86ee, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x3f, 0x5, 0x0, 0x0, 0x3, 0x40, 0x0, 0x3, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x5, 0x5, 0x2, 0x8, 0x0, 0x56f, 0x2, 0x4, 0x9, 0x10000, 0x10000, 0x7fff, 0x7, 0x99af, 0xfa4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x1, 0x400, 0x6, 0x0, 0x100000001, 0x60000, 0x0, 0x40, 0x3, 0x0, 0x100000001, 0x41, 0x0, 0x2, 0x4, 0x0, 0x6, 0x2, 0x9, 0xd84fe6a, 0x20, 0x81fa]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000a40)={0xa, 0x0, {0x11, @usage=0x4, 0x0, 0xffffffff, 0x0, 0xffffffffffff0000, 0x5, 0x8001, 0x60, @usage, 0xfffffffe, 0x0, [0x4, 0x0, 0xff, 0x6bf, 0x1, 0x100000001]}, {0xfff, @struct={0xfffffffa, 0x5}, r0, 0x400, 0x3, 0x8001, 0x7, 0xfe4, 0x804, @usage=0x100, 0x80000000, 0x80, [0xfffffffffffffff8, 0x5, 0x2, 0x8, 0xff, 0x8]}, {0x6, @struct={0x7fffffff, 0x80}, r1, 0xfffffffffffffe9d, 0x4, 0x1f, 0x100000001, 0x81, 0x75, @usage=0x2, 0x22a, 0xca2, [0x401, 0x1, 0x5, 0x7, 0xfffffffffffffffa, 0x9]}, {0x75, 0x8bc, 0x8}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x4, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000000940)=""/157, 0x9d}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x2, 0x20, 0x0, 0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000003440)={{r2}, 0x0, 0xc, @inherit={0x78, 0x0}, @devid})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="018000000400000000000000", @ANYRES32, @ANYRES32])
sched_setattr(0xffffffffffffffff, &(0x7f00000007c0)={0x38, 0x1, 0x34, 0x7, 0x5, 0x3, 0xff, 0x3ff, 0x0, 0x8}, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x8, 0x8, 0x6, 0x5dbf6586, 0x7, 0x51, 0x6, 0x1800}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8)
clone(0xf70a86956630e51d, 0x0, 0x0, 0x0, 0x0)
[ 374.178317][T10627] loop4: detected capacity change from 0 to 513
[ 374.190597][T10623] loop1: detected capacity change from 0 to 88
[ 374.196869][ C0] sd 0:0:1:0: tag#6804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 374.206719][ C0] sd 0:0:1:0: tag#6804 CDB: opcode=0xe5 (vendor)
[ 374.213049][ C0] sd 0:0:1:0: tag#6804 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 374.222106][ C0] sd 0:0:1:0: tag#6804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 374.231153][ C0] sd 0:0:1:0: tag#6804 CDB[20]: ba
[ 374.240859][T10624] loop2: detected capacity change from 0 to 82
[ 374.335029][T10624] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 374.351757][T10627] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 374.353441][T10623] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 374.370451][T10624] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 374.382190][T10623] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 374.384919][T10627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 375.680177][T10633] chnl_net:caif_netlink_parms(): no params data found
[ 375.715679][T10633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 375.722781][T10633] bridge0: port 1(bridge_slave_0) entered disabled state
[ 375.731227][T10633] device bridge_slave_0 entered promiscuous mode
[ 375.738574][T10633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 375.745686][T10633] bridge0: port 2(bridge_slave_1) entered disabled state
[ 375.754383][T10633] device bridge_slave_1 entered promiscuous mode
[ 375.772385][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 375.782860][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 375.804423][T10633] team0: Port device team_slave_0 added
[ 375.810989][T10633] team0: Port device team_slave_1 added
[ 375.826640][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 375.833600][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 375.859592][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 375.872900][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 375.879883][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 375.905803][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 375.930915][T10633] device hsr_slave_0 entered promiscuous mode
[ 375.938864][T10633] device hsr_slave_1 entered promiscuous mode
[ 376.000129][T10633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 376.007197][T10633] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 376.014521][T10633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 376.021553][T10633] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 376.052612][T10633] 8021q: adding VLAN 0 to HW filter on device bond0
[ 376.063203][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 376.073425][ T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 376.081498][ T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 376.091259][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 376.102254][T10633] 8021q: adding VLAN 0 to HW filter on device team0
[ 376.113426][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 376.121728][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 376.128841][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 376.147107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 376.156558][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 376.163607][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 376.172457][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 376.182164][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 376.194771][T10633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 376.205190][T10633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 376.218753][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 376.226833][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 376.236288][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 376.250454][T10633] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 376.260502][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 376.268214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 376.282489][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 376.331281][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 376.393499][T10633] device veth0_vlan entered promiscuous mode
[ 376.401118][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 376.411310][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 376.419061][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 376.430337][T10633] device veth1_vlan entered promiscuous mode
[ 376.437373][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 376.453655][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 376.462100][ T1919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 376.473126][T10633] device veth0_macvtap entered promiscuous mode
[ 376.483259][T10633] device veth1_macvtap entered promiscuous mode
[ 376.495851][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 376.506365][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.516180][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 376.526982][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.536859][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 376.547361][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.557178][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 376.567649][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.577462][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 376.587875][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.600334][T10633] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 376.608307][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 376.618179][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 376.627168][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 376.637736][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.647564][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 376.657997][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.667803][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 376.678282][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.688089][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 376.698509][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.708313][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 376.718736][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 376.731333][T10633] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 376.740165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 376.811579][T10661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 376.833328][T10661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 376.842048][T10661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 376.861269][T10661] device bridge_slave_0 left promiscuous mode
[ 376.868240][T10661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 376.884398][T10661] device bridge_slave_1 left promiscuous mode
[ 376.891397][T10661] bridge0: port 2(bridge_slave_1) entered disabled state
[ 376.911181][T10661] bond0: (slave bond_slave_0): Releasing backup interface
[ 376.949120][T10661] bond0: (slave bond_slave_1): Releasing backup interface
[ 377.030962][T10661] team0: Port device team_slave_0 removed
[ 377.078949][T10661] team0: Port device team_slave_1 removed
[ 377.088959][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 377.096650][T10661] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 377.111951][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 377.119821][T10661] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:38 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000050000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:38 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4020e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:38 executing program 3:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', '/dev/vcsa\x00'})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x6027c3, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={0x0, r1}, 0x10)
08:45:38 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb0c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:38 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa44f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 377.193487][T10664] loop4: detected capacity change from 0 to 513
[ 377.202087][T10668] loop2: detected capacity change from 0 to 82
[ 377.205987][T10671] loop1: detected capacity change from 0 to 88
[ 377.216366][T10668] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 377.222442][T10671] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 377.229074][T10664] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000060000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 377.250010][T10668] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 377.264984][ C1] ==================================================================
[ 377.272713][T10671] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 377.273074][ C1] BUG: KCSAN: data-race in wg_packet_receive / wg_packet_receive
[ 377.290017][ C1]
[ 377.290114][T10664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 377.292324][ C1] write to 0xffff88813e02bb48 of 4 bytes by interrupt on cpu 0:
[ 377.292345][ C1] wg_packet_receive+0x7cd/0xba0
[ 377.315420][ C1] wg_receive+0x4a/0x70
[ 377.319580][ C1] udp_queue_rcv_one_skb+0x7bc/0x8c0
[ 377.324876][ C1] udp_queue_rcv_skb+0x56b/0x590
[ 377.329812][ C1] __udp4_lib_rcv+0x1267/0x1ba0
[ 377.334655][ C1] udp_rcv+0x1d/0x20
[ 377.338536][ C1] ip_protocol_deliver_rcu+0x291/0x540
[ 377.343997][ C1] ip_local_deliver+0x1d6/0x2a0
[ 377.348848][ C1] ip_rcv+0x1a6/0x250
[ 377.352822][ C1] __netif_receive_skb+0x8b/0x1b0
[ 377.357865][ C1] process_backlog+0x23f/0x3e0
[ 377.362629][ C1] __napi_poll+0x65/0x3f0
[ 377.366964][ C1] net_rx_action+0x29e/0x650
[ 377.371557][ C1] __do_softirq+0x158/0x2de
[ 377.376075][ C1] do_softirq+0xb1/0xf0
[ 377.380231][ C1] __local_bh_enable_ip+0x68/0x70
[ 377.385263][ C1] _raw_read_unlock_bh+0x17/0x20
[ 377.390206][ C1] wg_socket_send_skb_to_peer+0x112/0x130
[ 377.395930][ C1] wg_packet_tx_worker+0x142/0x360
[ 377.401037][ C1] process_one_work+0x3fc/0x980
[ 377.405893][ C1] worker_thread+0x616/0xa70
[ 377.410486][ C1] kthread+0x2c7/0x2e0
[ 377.414562][ C1] ret_from_fork+0x1f/0x30
[ 377.418979][ C1]
[ 377.421288][ C1] read to 0xffff88813e02bb48 of 4 bytes by interrupt on cpu 1:
[ 377.428825][ C1] wg_packet_receive+0x789/0xba0
[ 377.433764][ C1] wg_receive+0x4a/0x70
[ 377.437909][ C1] udpv6_queue_rcv_one_skb+0xac2/0xbd0
[ 377.443373][ C1] udpv6_queue_rcv_skb+0x56b/0x590
[ 377.448486][ C1] __udp6_lib_rcv+0xca5/0x16d0
[ 377.453345][ C1] udpv6_rcv+0x1d/0x20
[ 377.457413][ C1] ip6_protocol_deliver_rcu+0x8bf/0xdd0
[ 377.462981][ C1] ip6_input+0x73/0x120
[ 377.467150][ C1] ip6_rcv_finish+0x1d6/0x260
[ 377.471830][ C1] ipv6_rcv+0x85/0x140
[ 377.475899][ C1] __netif_receive_skb+0x8b/0x1b0
[ 377.480929][ C1] process_backlog+0x23f/0x3e0
[ 377.485697][ C1] __napi_poll+0x65/0x3f0
[ 377.490026][ C1] net_rx_action+0x29e/0x650
[ 377.494617][ C1] __do_softirq+0x158/0x2de
[ 377.499144][ C1] do_softirq+0xb1/0xf0
[ 377.503906][ C1] __local_bh_enable_ip+0x68/0x70
[ 377.508931][ C1] _raw_read_unlock_bh+0x17/0x20
[ 377.513864][ C1] wg_socket_send_skb_to_peer+0x112/0x130
[ 377.519583][ C1] wg_packet_tx_worker+0x142/0x360
[ 377.524689][ C1] process_one_work+0x3fc/0x980
[ 377.529547][ C1] worker_thread+0x616/0xa70
[ 377.534134][ C1] kthread+0x2c7/0x2e0
[ 377.538195][ C1] ret_from_fork+0x1f/0x30
[ 377.542602][ C1]
[ 377.544913][ C1] value changed: 0x00000001 -> 0x00000000
08:45:39 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
[ 377.550614][ C1]
[ 377.552929][ C1] Reported by Kernel Concurrency Sanitizer on:
[ 377.559065][ C1] CPU: 1 PID: 1918 Comm: kworker/1:5 Not tainted 5.16.0-rc3-syzkaller #0
[ 377.567489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 377.577545][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[ 377.583614][ C1] ==================================================================
08:45:39 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40295, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 377.639565][T10668] loop2: detected capacity change from 0 to 82
[ 377.646251][T10671] loop1: detected capacity change from 0 to 88
[ 377.657401][T10671] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 377.666068][T10668] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 377.674534][T10668] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 377.686296][T10671] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
08:45:39 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb100, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:39 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa450, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 377.741202][T10682] loop4: detected capacity change from 0 to 513
[ 377.760884][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 377.769855][T10682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 377.803714][T10686] loop1: detected capacity change from 0 to 88
[ 377.813883][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 377.822511][T10686] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 377.823367][T10682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 377.843622][T10689] loop2: detected capacity change from 0 to 82
[ 377.850393][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 377.858846][T10686] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 377.868926][T10689] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 377.887320][T10689] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 377.918719][T10679] device bridge_slave_0 left promiscuous mode
[ 377.925826][T10679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 377.951094][T10679] device bridge_slave_1 left promiscuous mode
[ 377.957733][T10679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 377.981204][T10686] loop1: detected capacity change from 0 to 88
[ 377.983038][T10689] loop2: detected capacity change from 0 to 82
[ 377.989393][T10686] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 377.996031][T10679] bond0: (slave bond_slave_0): Releasing backup interface
[ 378.002769][T10686] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 378.021474][T10689] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 378.030093][T10689] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 378.059760][T10679] bond0: (slave bond_slave_1): Releasing backup interface
[ 378.154558][T10679] team0: Port device team_slave_0 removed
[ 378.211044][T10679] team0: Port device team_slave_1 removed
[ 378.224373][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 378.232344][T10679] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 378.248286][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 378.258316][T10679] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:39 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:39 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402bc, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:39 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa45e, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:39 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb140, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 378.341636][T10693] loop2: detected capacity change from 0 to 82
[ 378.344628][T10691] loop4: detected capacity change from 0 to 513
[ 378.358448][T10695] loop1: detected capacity change from 0 to 88
[ 378.373277][T10691] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
08:45:39 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf4}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:40 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402be, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 378.388850][T10691] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 378.394795][T10693] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 378.455865][T10695] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 378.465137][T10695] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 378.486789][T10700] loop4: detected capacity change from 0 to 513
08:45:40 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x5c}, {0x5}, {0x6, 0x0, 0x0, 0x10001}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
08:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 378.497858][T10693] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 378.506895][T10700] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 378.546335][T10695] loop1: detected capacity change from 0 to 88
[ 378.588347][T10695] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 378.602819][T10700] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 378.651255][T10695] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
08:45:40 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402bf, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 378.721435][T10693] loop2: detected capacity change from 0 to 82
08:45:40 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, 0x24)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, 0x24)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c62d21c3033fa447c8625de334d390210000100ff", 0x16}, {0x0, 0x0, 0x300}], 0x0, &(0x7f0000000240))
08:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:40 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb180, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 378.768836][T10693] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 378.785378][T10708] loop4: detected capacity change from 0 to 513
[ 378.800782][T10693] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 378.816402][T10708] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 378.833639][T10713] loop1: detected capacity change from 0 to 88
08:45:40 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa45f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 378.871349][T10708] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 378.883139][T10713] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 378.913440][T10713] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 378.934140][T10719] loop2: detected capacity change from 0 to 82
[ 378.949109][T10719] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 378.967837][T10713] loop1: detected capacity change from 0 to 88
[ 378.972114][T10719] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 378.995530][T10713] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 379.015821][T10713] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 379.046766][ T33] device hsr_slave_0 left promiscuous mode
[ 379.057156][T10719] loop2: detected capacity change from 0 to 82
[ 379.063785][T10719] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 379.083014][ T33] device hsr_slave_1 left promiscuous mode
[ 379.097433][T10719] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 379.110374][ T33] device veth1_macvtap left promiscuous mode
[ 379.116481][ T33] device veth0_macvtap left promiscuous mode
[ 379.122476][ T33] device veth1_vlan left promiscuous mode
[ 379.128323][ T33] device veth0_vlan left promiscuous mode
[ 379.391135][ T33] bond0 (unregistering): Released all slaves
[ 380.447356][ T33] device hsr_slave_0 left promiscuous mode
[ 380.456214][ T33] device hsr_slave_1 left promiscuous mode
[ 380.465843][ T33] device veth1_macvtap left promiscuous mode
[ 380.471899][ T33] device veth0_macvtap left promiscuous mode
[ 380.477915][ T33] device veth1_vlan left promiscuous mode
[ 380.483634][ T33] device veth0_vlan left promiscuous mode
[ 380.702848][ T33] bond0 (unregistering): Released all slaves
[ 380.826139][T10724] chnl_net:caif_netlink_parms(): no params data found
[ 380.861699][T10724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 380.868785][T10724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 380.876670][T10724] device bridge_slave_0 entered promiscuous mode
[ 380.884008][T10724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 380.891144][T10724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 380.899160][T10724] device bridge_slave_1 entered promiscuous mode
[ 380.915689][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 380.927412][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 380.946965][T10724] team0: Port device team_slave_0 added
[ 380.953170][T10724] team0: Port device team_slave_1 added
[ 380.970497][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 380.977563][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 381.003696][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 381.014880][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 381.021816][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 381.047760][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 381.096904][T10724] device hsr_slave_0 entered promiscuous mode
[ 381.114983][T10724] device hsr_slave_1 entered promiscuous mode
[ 381.228965][T10724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 381.236039][T10724] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 381.243279][T10724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 381.250326][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 381.281466][T10724] 8021q: adding VLAN 0 to HW filter on device bond0
[ 381.292389][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 381.301339][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 381.325370][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 381.337546][T10724] 8021q: adding VLAN 0 to HW filter on device team0
[ 381.349367][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 381.358909][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 381.365988][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 381.384115][T10724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 381.394582][T10724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 381.410848][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 381.419426][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 381.426468][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 381.435052][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 381.443557][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 381.452398][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 381.460863][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 381.469679][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 381.477369][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 381.490426][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 381.498419][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 381.506089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 381.559395][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 381.617018][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 381.625972][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 381.633714][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 381.643333][T10724] device veth0_vlan entered promiscuous mode
[ 381.652672][T10724] device veth1_vlan entered promiscuous mode
[ 381.667006][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 381.676360][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 381.684625][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 381.694717][T10724] device veth0_macvtap entered promiscuous mode
[ 381.702486][T10724] device veth1_macvtap entered promiscuous mode
[ 381.715764][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 381.726234][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.736136][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 381.746546][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.756446][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 381.766968][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.776782][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 381.787332][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.799969][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 381.808001][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 381.818315][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 381.827555][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 381.838039][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.847901][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 381.858329][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.868241][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 381.878668][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.888492][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 381.898905][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 381.911072][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 381.919044][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 381.927679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 382.000403][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 382.021296][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 382.030317][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 382.050090][T10752] device bridge_slave_0 left promiscuous mode
[ 382.056878][T10752] bridge0: port 1(bridge_slave_0) entered disabled state
[ 382.074273][T10752] device bridge_slave_1 left promiscuous mode
[ 382.081434][T10752] bridge0: port 2(bridge_slave_1) entered disabled state
[ 382.100097][T10752] bond0: (slave bond_slave_0): Releasing backup interface
[ 382.137601][T10752] bond0: (slave bond_slave_1): Releasing backup interface
[ 382.197276][T10752] team0: Port device team_slave_0 removed
[ 382.251820][T10752] team0: Port device team_slave_1 removed
[ 382.263023][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 382.270862][T10752] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 382.287296][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 382.295191][T10752] batman_adv: batadv0: Removing interface: batadv_slave_1
08:45:43 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:43 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402da, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0000000f0000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:43 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb1c0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:43 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
pidfd_open(0x0, 0x0)
r1 = gettid()
process_vm_writev(r1, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
pidfd_open(r1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0})
r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100))
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x6374, 0x0, 0x0, 0x0, 0x0)
r4 = gettid()
process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
pidfd_open(r4, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x2a)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005000)={0x0, 0x0, 0x0}, &(0x7f0000005080)=0xc)
setregid(r6, r7)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000340)={0x274, 0x12, 0x100, 0x70bd28, 0x25dfdbff, "", [@nested={0x261, 0x56, 0x0, 0x1, [@generic="bb6eb5c8deefb3c8a6621177e0c78e760215136f965e68f44030c37b76af8cb1f0a31c052bb1c29897829426aef1a79a6db43d101996fdde886cfb98adcd043b783b724b7c9dda47766ad4b6053c2e30081ba1f5be8b9f508dd04a5455f93b00760158ceb1dd0c5e3fe85ffb54854574a384ff0df3674a0ed3d55df500d2bafc6910feeac2d18cd848763cd1154c103bf5696475b7996a3b20bbde5e51003e4b8035f354393afd2d31876d9b5b649efed7a1182feef9eecb03df88be3626faf664ecbb", @typed={0x8, 0x7f, 0x0, 0x0, @str='gre\x00'}, @generic="2688bbcad08e198f9059b84325eb6a4f7744ec45be3a6827683470362c67898ce6fd057d74aba1a390dc480c1e814456bd4caa8295fed5fe593d5cf2c03609447c392d988daf1868e8931beb7dd379426ba6feb55e0f5b08dbf560c22e4df77af0d0f76812174b3a0fbc6a570c788776b48dff0083951e87bdbd21473d0c247313f4e2f81d9973", @generic="dd9ec02d30c6d5699c2da4ee48a8e9016ef11f4903cb46e374e1c2a147f300aea3a61378b8516578919cf48c1d4af98d152adce95dfa5037cb7162bdaac6f99e5f6d511218c0be768368ccab28de8e297ccd60e8d58f3a61d0dfef8d0fa5ec01bbf6ba27710929f62ca9e407aad547531db5f4d27feb455b338b6a82e50c69480a1748532cd79c7fe447c312655a404f", @typed={0x8, 0x5f, 0x0, 0x0, @uid=0xee01}, @generic="05cb607a9cb83e6931ed6ecac0339186f4b5c31e30ddc64e579a745a120ac27545959784b4075a0a8cd9b2ebffab23660009fc10648bb7a90f5ce4adf8159de6def5c00256f1310bd5d5a66a773d50f1948944a8242ef3c9807990fc05eb1327dc9a450a94793babfe92f3", @typed={0x8, 0x28, 0x0, 0x0, @pid}]}]}, 0x274}, {&(0x7f0000000040)={0x10, 0x20, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, {&(0x7f00000005c0)={0x251c, 0x28, 0x400, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xa, 0x0, 0x0, @u32=0xfffffffb}, @generic="ac59aa18bbf29ee10d52202306169b34d202aac4a1a5d882d2ebf604ee279ba92a66da75de151a075157089f0f98867e06e6b76502f9ec895e60be08cb8c4d58848180052ae45a13b901b442aa9c3c35797b28f28469779407a9bd46d9ea662a8a25a329d8cf1e4692fe1caa70a377e211f89f29ba77ad9a5851a7b1c3ee670a87cce37044ac5a6efe2553d0cfe091022ec67597f9beca3656e7ddc825dffa520ca7de822cbd08000e0efecaa1400ccebaca08814212b8ef947044dba77b9c286fd72cec1c0e7a518a55e43363ded059cf2f239b3d69cb4a247d7faa67127d1a531576e2ffa58dc8bc7b0be0450c16108b1e95daf4bb55c05a454c71e562ad041e5dbe33952200c9375f092cb74a338521f444ee47ef45164177db0321ea39090bcc77c7be9c982f6f7df1263fa3ed29b0d9296e3f8acc2ba7c0f7a03d1241eca1b4a5ff5b483424d7cdf672bb2b2833c42d394f008fe91442536f9f0fd1a30fd6315eac1c4af93a619e56669de0dabaf65bc1538456b8f5ea3a649ad9f65d955adfc464fbec283406a44e6ab6cd922cacf61c10e2b6bf7d3e2845d2f5a6da2bf68fa09404186d1f7d3cffc6a36de98ff8c2240d483de1a7ffe08be0bd02f9bbc1784df955fecad2a5b8f457c4910e772caf9aad6196a0d4d44788354037fb0de6305ddb3cd36aa038fc98488a3774bce593ef458bff304054c182572ac639a0ce6b9138398d497ef436129a512c92e9e8bab3d3193647269d17cd70df10e551c225da7793d1f6f92acb04ef82700a50f22ef4f71c627dde3521e94b90c9129da3c790f54320f0349d06e885e988a2c8790882c32f30dd170174b048d1807cd48c6e46f4429e70f666627675b5aa06751180f5ff52f4cdcc2558a3448d388a0421d0d19f699e5e0a4df3d974326075647b1144c65ee8758695c4ac19f6042617ad2cfb46f53cca797ff26bf06f32dc53a61f8125fd7cac74c83a83d9b0099874b49bebfcdc678473a61c8afb8435e40ab361a10770029922234d6ab7452c9c96430f20df5abb049ef928185815d1392ad45cc7579a0709c18815c5be27848a8063c3161c0394ff3e4f528b23973695f46ad7ecd34af27ddeef3912ba15ed5401c014a7cfe29387d27c824a314eb069b580e5c017e15e1c1a77aa766c01ff8a5d666810f39da92b3a5940022e58a7d99dbc39a284b099e14b79e977cee7968dc025373b18e52ffa15760aa1689305069ec9d05d8ee487b5b26d4266975feeb411428948b49beb233c49177ee3e77b623ade4a3e102935c905ca44931787734c161821119f0f930c4d548b3667441f37ea45e77cfcd6de510cccee917ac11241b28505cc9d70f7b60e131fa121b98ac48ed075ef6f53955d6eae0bb664f2e1ca3ee978c59cf499369fc671b82084d858488c60200295193942c73efa0efef0fd30b975f0cc6f082787fe87dc682c1113824387d15f59e43bff1fda32492591f1576cb8d042d214c42397e390d64b246581b15bc1086682675c1a05b78b684abd50e5dec0fdeb4bff551710f200a375bb6ff156ae9cf2cdea7ffbdb982cf49247a7094d71db12fa18d6818b84c9fa797f757bd90b554e2d56972c447a80787957c8c3a348f05fda81df7d7131e8086a3fa6403681651619c9585e32620facfa1906026f3f82311a69670cb3ca7c9f293cc61f9be541d0edaa0ec204d408e8c1f4c4598bdbbe9b46d4b86e43644725c78853337b041e913dc4dc66b6632f59438fe55fa115590eb19fab628780e9c4674646502e3f24856920cc64728baf24abf0067488a7153f6092b835322e6940db44a44f3b9aee481b7df0c181618c72c586c81e2e84aec6de57e11ba9d6b77e0a9ba5b80ebf41446c36e771019ad602e8bba990d23a1cc36b216184325dcd5ca27491acad355b05f50d876adccf1a852df61f330772b130f20c39d187ff30628a86b27ff620bccd8fd9070f944699b74f7b408a22a8eee8d500d21a7675c930e12ed7ad84bb294e7bf5f989f4dd32e892c7a60f512a1f0e415423996061bbb78597d53fa4f3f01c1366e3518481b1132de962fe5bb3ca70ca022118636d670eee5fbd95b619c04650f842fad5dbc436d9d9cadd7b2fa00ab57a0ef3e59a4baabc7d6e2f9eb13f8ed8b76af0f59f075c117d5e6861ce4eb792b774579adad0ce5c9535edf0857df4906c5fa7c7adf07c828dc9a91bd90be6ff2a900f62a21a173653563d0d9ed844244c05ecd20ec8994948851d7eabb3da7b0bfd5929211faf5b304809b1d5d035fdaee99f7f415cbd5ad22e069d79a4632c7c0b0f4745fc2c98af39a70466cc956cf12c1404d025c154e1f36b4f38f2d191b370eaa06a92be1cd02d9b4c2b0f7150311ad7d101de13ee3214b56e82a7754ed00c0a7cf481a8a301b9fcbdee1cedf9c04ffe318c564dff2da122b17f06ea34e9e86ed54d7c2b93a3653b09b001f8c7622e6692e4e5e065b62361dda6799bc83076b32bbde32e757f1a015ee046bad40dd84156f54645c3c280dd6f21e35af840c31dba723e3199d79df94da29e3b61a07a792ba3c291c221eec0c9af20c3c848dba20b0ed2b804d5c044ae3a6b48aadc90477291fc5da71cb3f75367ad89e4cfae8d6cbbd32fdf9098b35ca2301dfa477070e5d846ca9f61a5d0b0c61430c8b5e31bcee8813701fe226aa18bc2c0e11c3d8c70d4b7c1b261ce682cb32dabed4d0dd5ebbb4f2f5df999012b917d5e0879247184766d7a79c560ffd568ef7a93b2b54d359e5e80887fdec1eaca879c82d53be8d99679af9fc334c06f6e1f0ef93392d7fd61efe0d3b2ac98436e4c96c33bf87cb46f05cba7d32d88e4f899d6f8997ca5db5c15c70f3d63a81d07f5f590c1ba6a915ea575f61b8f6c2b7eef880ef7a739a211acccdd980124d15f3df6c0db91479f6b866c1bfbd5f8ac1813683d83b8dee693b1b1f17fb6a5da89f571bc0a43b07ecf44ab91cfb33c744e4520c2b8d076e1bd3bb8db164c52a992f685414ec0a42c7418e4ad3df8fa82ab59c3d56f9f0a4ab5a6a360d44e96562ebaa59d285caac8be6504c5cba73d43ac72c2ea712ba02f8bebed14089fdb0604f751f7f33ae0e4b3549978e31717acde6cf96a05d34d93a425c9aac1cf11d5a59eec287c52348e925cb952b6867c3b8f2eb4188ee5822dd5c2125fd86b39273c038b00254796a8232343c1c71dfcd0363fde49342599e7472e229bd46e7ab3f369ea0812714da7b96f03f923f2d22ac47d43c59ccb365f12064977af184c5a486be8495ef5d8c6f95facfa7ebbb3a4d84a72e0a94a66951b97190f8037dfa9ae10dbca6ce94bc2cc74176715e1944b5424bda133be6e6e61fdba2aacd0121cba09192e9bfa266b2803fe7a5cf3bb738ceceec5046c7a176ba5b1bc4b37469d20e6bb6350e8cbae0d4769c54f95174576f283ee78cb67b99a7669da860f5578aef51c9e7bb89e312be89309c800f243b38edb21a680a79bb7e33429109774b9ddfc6741da75b826da6fc42a4f9280d8e9d667a10c97201d0fca5eb774202808fd4f0fd0551a5656e59675732d4097ec54e7f0d90efb3252f752803c5bc8488e4e9547576ea5aa0f55c1a7e7fcd444e2a26efc9cbe60a7ec063af882d8e5dd9cb26000190185a4ccd8c2a50dac7087ba7957651bdb35f33ab5da335ea717fe21f16f0eadd925ffd69ae73eec3d081bd7428409744612c5a8d7938354cbbdfe9c4049b47f5b9e4fcd14d7f4d6b918fc900c421810d5d49c3818f5e0977c80c51bb183adca574c0ce69dd7c0ad9243e35eb189243e1c2ecf5f60be38e97bf470a13be8af8e31294937fd4508388dc283a4bdcfb7d56ef19a5c6de4c4a9561aa9843939cf29e14bad1bb49b9171210b191f13a0d2d6e1e5c06dcd7dcf9979e6e8ae938f738ffeb660df82138f295fb264d57ac03980fcf64ae142d2ab7e1209479be4a6dee413eedfe6a791ca6354727527fb48ff4d2abc394e351e6c69b70ea9ea818e9779eef2ee3949bf8caf0955206cca66788eff84b37a8feb217e78e698c3be05578b6372de165df99cfa7ba4e73561cfb842d3720c4604bd82135bb7bb0f412d8c1ce694b97f18db8da7479de8c219840e504b92fd62d35e4ea3ee067344fbf48b7606ae9b9697c4ef5f5330259e6523635614bee2277db7e740e571ed916f8c54912868f19bd377264dca1040c4c5f989e24ca098aa35b870b5099fdf3eaed6fd52cf955dc25f6c5e209d118e367127ffd4965b6319c16658dca868a83906cf0422bfac94cdb436421e2f912b5fa1167deb5a6570fb56ecee1639b42a12ca965eb4399a2875cad6dc737e054cfb29bfc88565bb8a97c9dbbadbfac82c52236289dac2e2e213bdfa49bcfc37e693c0e82fa3110f10fe03a77701cf325d1ebbd937cea955db9811045f4ebf10d2ecaaafde658796c5d669de35f7c3c43236caa82727e87d816207aca47ee79f9a5d7e3dc94a7c8d81c0b9105e668d253a9b231a9d10d6f05ed624796cfa1475c1ed9b611067acfae85070ca2396765152160d74d03d7b14947d0ebca3244900492f1678019aa3ed10c92f57ccf10bc8ac810d7a79e5809c6dac81298e2ace0630eb81c6e7d3266cce75b73f04dba1632d3fba1ff25621a24201f18213ea208cc65ac32b0e20508e0bf48bec1fbe139f32674750a5af15a39d6d405f247bd8bd59e8e1816ccda6d3f695598e80328e288a8534f9e9aad112d73e335a4ddce614e740f3f6396bc08250af918d93c2a2e4e67a2233772d5a71ee931293d1d6b43407d7def55a33c4f3361e6bbc83725806abb7938993f153667c6d6733428a6a39eb2d7ecaf651e321ccb78073155c8d90891bec15b7b83d6ac7ca8046bf67bbad9205019ca89d94896aeec246f8e4e0ac3880f2f3ec73d98b1046490cc59f3a5e87b3e6c6b7a3af885a993a91cffedb05108a5da395e72f5d6c28a4bdfe148ff38bc6051ccbc4777efe410bcfcc7c31414a2be00c3ded81c103653aa79e570bc60192631e75071403cabfb8d8c3f95c0d1e36e617bc3689422adf6cb13ae9cf5363f860d132f150ad4dd225b1142e1bb8fc07bfdfd33c6203965502b8ae1d441c5ffcad33cd8006352c98a48b36f6448f4dee0ff718f917544f04e6d4acc254cd448791a01fd293ca6c457f00a90b8bdf46d16e3daa94ceed6801f447300177a401d5775c0ff9acdefe4549210f3d52968c0f9008a4b834c5358ab1c9301294732449041bb8c8c74e68cb72f7478f9919cc4ddf396b51f270217bf32195b7f4b399e32fd05973099e6179257f0488636d94515c0ded9f2131ea6245df10b69e76638ec826ee1175b01d253902238c39ca8eaee1a32ca1b4d65423bb77cae1f1f22fe68df074eae86a1273305e3e15a95edd0e07345bf11ba981d97b5cfc0cf9a53d34afe7b260249a0b593639a345b27cd47173d9b6b38dbd5acffbb3dbe2344ba37dcda6b2faa930794e9506945081715c191b9f8aef2248361d1ab87656820ae911191d1869872349dbf10593bf6287358bd7365034753137ada4a47b82c9e4c72852db0b5068c582c28f757abf2a012936cf6106e00c831c31a096fdf6513ad77f05ca73653b8475c617458cd2f67aee477d7b491239b6e17a5e44cefbc3a0f0ab43396d3044298e8c387693edbea06a2c6cc3c2adda850cc8ad67096ec14e9b131b525fd0c1ede86bd65b3b9d4727924fa47fdf2c7c3c7a9e6bf86adf3acbcf904b8940c12a1ec41669b35caa8d2a7221da79634d75f8b05c80f5fd797330", @generic="bed80a7a7642bb6a4b5bd8110a309ad844cee1bd90c2af16354d33393d43d98d3e9e2d318cff659fc8300d237f77838a0a9434bcac96b3f5345ea0168204bf3890a69ef2ed08eff5ddb1d263a041d028d654a1abb103b58d2cef6212c580965c0a27a0e2c3035d5eb8d2963ac5ec860726176e53fe1b857b3e93bfdb89fdd66a9de10c16381cc1bcd78d41869f28e6771ec38bb98b885c9ac308e0a03b027fe79c4ddddca6fb607a084f59db0a725fe9edce3c1dad2a83d468780b91c076e2887cbc6f8bd8cb55eabda45c054d5e2b1cc00b9396", @nested={0x13d7, 0xc, 0x0, 0x1, [@typed={0x99, 0x2a, 0x0, 0x0, @binary="b38703f80619aecab6db33314c9ab838fe6b515e260da2f233ed6cecd672d6dc847e60e608816dd1c15ef93b65d9889b7b01f94e7499f8c1c6564491dbb6fbb23ac187fdc8ec247dbae0520386afbadd69aa21ff53660473fef57c9ecf1fc612344907fef4910cf49382c24874c6844bf2eaab78a1d5f0b7da36783bb60b3aee3171a2dee637f37013bdb55e3c92ff113a9a07e1dd"}, @generic="9ecd4db08c108e143138a31976f48c04544c55377a322d0f4c6fb042048f874baf02667a622d826a68d5c6dab538d1c30e1453a005f68a193ea232c53af43d3601a070baf84f27a20dbbf746438f5dc8f3a7096bece7b3f596dccd64f58f2546170cbd8edfc1d9644affb2ee12b56f815d5b5f663164af4aa4e9b25ce837e6205dc0d8d22ecbeb29f2c9537a66b4e0c8f2f89f203de6f23faf811b9dc0309220e723d0b0e3d7184921e0c43d78a0f2d2800c7922f41c1afc53cc5837aebd7c0b", @generic="196d3914374c7274407ed74c6a754f2ca0bc0fadbc370fb765cacc9efc398a2f31cfa6cafcb6a83bad3486bcf409fe6621703c64abe021c0c5310e40ef415ea231c84147be875861cdc4c1eede6c358143e4eab0a59635f8dba91c937ff15c3b4b152c0591b08e3fd819583132fcb2b8f4a651909530e86b23e4dcd9b4861272b258d88cc4df2a293aec516291351d25ecf88b0e032c0a9161e3249b", @typed={0x8, 0x2a, 0x0, 0x0, @fd}, @generic="075a5283d774458ddceeffaccf27d452a77d8420c8798bed643a255f15bff66d80f0e5f487b242e99078c390f560d8a0afc7e356b8aba76a3a0026b42e450eece59e7adae5a78e28ee8d2451cf414220957fac5096fe1d5ea43358c0ce53b5f5f9464fc48c03fc2ca5130971fe3a5ab8c2c3a8c60a5ba0bf1b87d2f99080b8961e3a71606f31c7aeac95e9962cdc3b73f7ff451572084f28ba31d8b6722e57aa48f7e55d8167d0b86a0e78009ccc64332a90811a85a1799fab92f40a84666c", @generic="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", @generic="43afc092b15074dfb841d40cffd1e31ed95a9b109d2db3cc9a56a62ab129ec7632321f8fae1a72c0259c4a87620fc17df5161e867c71b102367bddaf61d8426b93bf7b68a1f25b48dbb2bb43d59586c561a913065ba346b058571a973675dc16ddaa1e7e888955d6e2910d3b6ce091d94849d4086da33b7657602d2d92c7d30ec37241f4cdc8b8b2b2241f287bd58c8aafe947e651bca5f0b2130df6898d2911d688f7a51b8fc267d062b860537c78b1b3935f9b1f708868ff2abefb62ad80c3728611fbe6d9f91fd7f39c9c3cf873662b", @generic="0dc4ee2b64edbda430e8d5d91e7dad6b5a3cf0e03507a1c18fa90d3e91764116f82830a358ba5cec8d3cca85c7a2530a103950a8285b4265012ecde9c9ab0fddbdac72"]}, @generic="83b579ef15d15b0aaf7cc98ccc4286494ecf591708204ac97b7f6aeedf9c4401660b34a0db06e5de7b74a92b5ad3689fd06fc3a10c897a119003e0b68da538c1d8d2209790dfb4fd", @typed={0x10, 0x58, 0x0, 0x0, @binary="68e8e7d002530131877f7a95"}]}, 0x251c}, {&(0x7f0000000100)={0x74, 0x1d, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0x64, 0x51, 0x0, 0x1, [@generic="a20bf9316cf9ebc89f15951dad9d1e0bb3ce17ad5cd938c8440758d7d844e85136704fd5c7c565c39e9ceb8735ab9de50551264536a3b084acefe7c4d0e9920ecffdab8ac892f7ffc1c6acad", @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x74}, {&(0x7f0000002b00)={0x1314, 0x34, 0x8, 0x70bd29, 0x25dfdbff, "", [@nested={0xe8, 0x28, 0x0, 0x1, [@typed={0x14, 0x83, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x9}, @generic="228b99a40aa5f7ab7a33a17ce2b0d303a637d766dbfe833e9a08777f1dc5c15623c901f8f5ad30b77a7efffe2c91be0c65e160c28d61251717c74df2a3d816a906589ab5c7dc17016ad824157cbba90371d2908217e70f0f17176a51296a6bff3fab5a77935ff0f5a6ad4136e843ce2f397215e4fe445d993906599167559e3959cbc560daddb0f51feb96d56995d876e3f788985d27bc61508a9d1a5188147e3558d398290c1f8723cfb836af84c0de456deb5983a5d88564796be0", @typed={0x8, 0x4d, 0x0, 0x0, @u32=0x1}]}, @generic="c2293400980d27b44d263f6f8266a138eae7e3adaac64abc75b4d810625c9bdc33c7b7af3c1b751e5ed180b7d3faf3adcf46fb602b6c6a5e823f5de73c52a5a3b93ae228", @generic="c14b8fab2c5f7a5fd0e9bd20b5ab579a47ba5341fa9d2faf36c00d035f01e2d1938064dd79a13ae966384aff93fd25c724a0425f83a7b9cd37ab915c8e99fcae92498d211ce60b3ab02684a18e244ff8f7e71abd525bf1ea79d592462b56c3506e296921f2be2dd3e09b27359f829caa7e8ab7d65f35a83c903afd1bb27b9e7512d9c40bce13ae906e2f9994918f93b54c192ab2af6e36b19d410ba1b0d769f9bfec14c08f865d05c696a45ca8596c9eeb271708cc20416b7c023b4b0a9a96897e46bdded54ac6934e529227df8a61a01eb30eeceb1d5506147d977b50813a3768d3b3b130ef", @nested={0x10db, 0x8, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @pid}, @generic="3416931b2703e1e466088588d36252b503a473ccc1c14918e1afa54bd3f64a1a79ff335ae67c2c9066cc35abe2cd56756288b3a7124290bc582b4eb8e9118306153745d7839acbd921d7f7d8e740fe7c47429fc36b6a", @generic="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", @typed={0x8, 0x12, 0x0, 0x0, @str='gre\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @pid}, @generic="9244a513e34c3e368941b023e7902cf2ffaadbf9a9f1db1c2a31e88465cfae2ea9503b240f25a827550caf827bf8cefdcf055d69e5b5cf76a7eab6362004e477cb36ef6d9fbfd925263658ede03d0f3bdc6a25619acf42eec298ad3ec26cfe4728", @typed={0x8, 0x39, 0x0, 0x0, @pid=r1}]}, @typed={0x4, 0x28}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x2a, 0x0, 0x0, @fd=r0}]}, 0x1314}, {&(0x7f0000003e40)={0x1178, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@generic="e18af4112cf1db9fa85d8e42895b958d62248940d111f85d69", @generic="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", @nested={0x149, 0xa, 0x0, 0x1, [@generic="6a01fd117ba797d77ea3452aa0eb97c9efa77f5fb7f66709bc42e09b37a3ab4a2827c09a4c2672fe5d9e29a8802a2b2395cc05299bd8cfc7148ca897694b20dc33afa28012bcf6b8e713054fcc7fbed0c7cc68318e00868492b56da43c000521e3a12ed39f15c22056aeca8ee422d9996d9075ce5045ec34e370a8acd3", @typed={0x8, 0x11, 0x0, 0x0, @u32=0x8}, @typed={0xab, 0x2d, 0x0, 0x0, @binary="b441b166c2ad3e2c254855cc5ebeb351e468b7890a25afc333d3a79b36e9801509b2718b2f0aea2d8d700018e73dec7936cb9b0db2f09f5d30faa6c8dcc27e09e8d754b82d9b388d30e8f2eebef08736f15ae5b7894cfc0f1c4c46c9fae1670985a4d1a8d66d5fc78d85d48fc7f5d83af3a125064c0a2fdebe0d49f9cd443c001e97d5a11b1555673c615bc50d5a33f13b675ca5c29505fd0347f8e794f042b4788bcb2c0872ac"}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}}]}]}, 0x1178}], 0x6, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [r0, r2, r0, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r7}}}], 0x48, 0x80}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x44}}, 0x0)
08:45:43 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa460, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 382.370577][T10754] loop1: detected capacity change from 0 to 88
[ 382.379055][T10758] loop2: detected capacity change from 0 to 82
[ 382.385735][T10760] loop4: detected capacity change from 0 to 513
[ 382.401814][T10754] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 382.411256][T10758] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
08:45:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000100000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 382.411675][T10760] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 382.438304][T10758] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 382.448981][T10754] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 382.503277][T10760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:44 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402db, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:44 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000110000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 382.571104][T10754] loop1: detected capacity change from 0 to 88
[ 382.578367][T10758] loop2: detected capacity change from 0 to 82
[ 382.599239][T10758] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 382.608268][T10754] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
08:45:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d000000140000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 382.655849][T10769] loop4: detected capacity change from 0 to 513
[ 382.669754][T10754] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 382.679452][T10758] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
08:45:44 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="2f73782e4023fd25233c2d002dd44fca6fb4edb7b1a6379aa78829399aed67d053132a431f8c72c51072afd4105ad4288319464e8e2ae6d3ac728cc9ea2f58d08609eb09e010ad352d744fb8d7851d079c9a1a129b483579da9b56f1fefb4126e9adab2352e75f49dfc9d7a94cca34c179dc4d7825f5f453b53cad359b31b7e40b7490705c1613bb1099771951ede2ab61665bcee9388484586bc5b8d1e7a6fa49646503d5a8000000000000"], &(0x7f00000004c0)=""/58, 0x3a)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.syz\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0)
recvmsg(r1, 0x0, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2)
mknodat$null(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x66a78e1b74e44f22, 0x103)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0xf8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x2, 0x6]}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x0]}, @CTA_TUPLE_MASTER={0x4}]}]}, 0xf8}}, 0x800)
umount2(0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
08:45:44 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb200, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:44 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa468, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000002800270d0000011a0000000000000000", @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 382.706999][T10769] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 382.729459][T10769] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
08:45:44 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402dc, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 382.805958][T10777] loop2: detected capacity change from 0 to 82
[ 382.816753][T10779] loop1: detected capacity change from 0 to 89
[ 382.848422][T10777] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 382.858921][T10779] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 382.893679][T10784] loop4: detected capacity change from 0 to 513
[ 382.900378][T10777] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 382.906083][T10779] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 382.921839][T10784] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 382.951401][T10784] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 382.968234][T10777] loop2: detected capacity change from 0 to 82
[ 382.986687][T10779] loop1: detected capacity change from 0 to 89
[ 383.004763][T10779] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 383.015740][T10777] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 383.036005][T10777] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 383.055850][T10779] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 383.162028][ T8] device hsr_slave_0 left promiscuous mode
[ 383.176865][ T8] device hsr_slave_1 left promiscuous mode
[ 383.195587][ T8] device veth1_macvtap left promiscuous mode
[ 383.201603][ T8] device veth0_macvtap left promiscuous mode
[ 383.207747][ T8] device veth1_vlan left promiscuous mode
[ 383.213601][ T8] device veth0_vlan left promiscuous mode
[ 383.427486][ T8] bond0 (unregistering): Released all slaves
[ 384.494398][T10787] chnl_net:caif_netlink_parms(): no params data found
[ 384.531280][T10787] bridge0: port 1(bridge_slave_0) entered blocking state
[ 384.538442][T10787] bridge0: port 1(bridge_slave_0) entered disabled state
[ 384.546133][T10787] device bridge_slave_0 entered promiscuous mode
[ 384.553297][T10787] bridge0: port 2(bridge_slave_1) entered blocking state
[ 384.560405][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[ 384.568066][T10787] device bridge_slave_1 entered promiscuous mode
[ 384.586550][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 384.597059][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 384.616979][T10787] team0: Port device team_slave_0 added
[ 384.623598][T10787] team0: Port device team_slave_1 added
[ 384.640393][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 384.647460][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 384.673468][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 384.685789][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 384.692756][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 384.718685][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 384.742676][T10787] device hsr_slave_0 entered promiscuous mode
[ 384.751821][T10787] device hsr_slave_1 entered promiscuous mode
[ 384.805584][T10787] bridge0: port 2(bridge_slave_1) entered blocking state
[ 384.812713][T10787] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 384.819984][T10787] bridge0: port 1(bridge_slave_0) entered blocking state
[ 384.827047][T10787] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 384.837151][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 384.857063][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 384.961556][T10787] 8021q: adding VLAN 0 to HW filter on device bond0
[ 384.986010][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 384.993875][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 385.003148][T10787] 8021q: adding VLAN 0 to HW filter on device team0
[ 385.011833][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 385.021054][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 385.029386][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 385.036428][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 385.060290][T10787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 385.070694][T10787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 385.084615][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 385.093323][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 385.101858][ T77] bridge0: port 2(bridge_slave_1) entered blocking state
[ 385.108891][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 385.116995][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 385.125862][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 385.134516][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 385.143338][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 385.151980][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 385.160657][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 385.169493][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 385.177983][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 385.186394][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 385.194611][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 385.208169][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 385.217860][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 385.226096][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 385.233728][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 385.241637][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 385.313658][T10802] chnl_net:caif_netlink_parms(): no params data found
[ 385.361986][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 385.370835][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 385.398861][T10802] bridge0: port 1(bridge_slave_0) entered blocking state
[ 385.405943][T10802] bridge0: port 1(bridge_slave_0) entered disabled state
[ 385.413863][T10802] device bridge_slave_0 entered promiscuous mode
[ 385.423025][T10802] bridge0: port 2(bridge_slave_1) entered blocking state
[ 385.430235][T10802] bridge0: port 2(bridge_slave_1) entered disabled state
[ 385.442107][T10802] device bridge_slave_1 entered promiscuous mode
[ 385.459526][T10802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 385.471445][T10802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 385.491381][T10802] team0: Port device team_slave_0 added
[ 385.502263][T10802] team0: Port device team_slave_1 added
[ 385.521557][T10802] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 385.528629][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 385.554618][T10802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 385.570602][T10787] device veth0_vlan entered promiscuous mode
[ 385.578896][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 385.588260][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 385.597252][T10802] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 385.604183][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 385.630118][T10802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 385.642885][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 385.650709][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 385.681856][T10787] device veth1_vlan entered promiscuous mode
[ 385.691753][T10802] device hsr_slave_0 entered promiscuous mode
[ 385.698566][T10802] device hsr_slave_1 entered promiscuous mode
[ 385.706707][T10802] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 385.714253][T10802] Cannot create hsr debugfs directory
[ 385.726835][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 385.734979][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 385.743547][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 385.753254][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 385.765669][T10787] device veth0_macvtap entered promiscuous mode
[ 385.776518][T10787] device veth1_macvtap entered promiscuous mode
[ 385.801951][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 385.812485][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 385.822367][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 385.832825][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 385.842639][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 385.853062][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 385.862886][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 385.873310][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 385.884555][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 385.893074][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 385.904231][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 385.912451][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 385.922000][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 385.941812][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 385.952271][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 385.962093][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 385.972625][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 385.982522][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 385.992929][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 386.002760][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 386.013216][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 386.027681][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 386.039407][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 386.048111][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 386.104356][T10802] 8021q: adding VLAN 0 to HW filter on device bond0
[ 386.120035][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 386.129307][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 386.138650][T10802] 8021q: adding VLAN 0 to HW filter on device team0
08:45:47 executing program 3:
getpgid(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000b40)={0x53, 0xfffffffffffffffb, 0xf6, 0xff, @scatter={0x7, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)=""/94, 0x5e}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/119, 0x77}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f0000000900)=""/152, 0x98}]}, &(0x7f0000000a40)="b22e41085c675d3fc5e3e045bdf9e3891fecd07472efbe05e2f1f3f8612d274a0a7ac095c9b987d244aa2fe7f6d355c22a63d749e61d82d389bede0555f177ebaa7e761e726a38cd5fcb6c81aae88a3f222e266067ba89d0bb428f3a3ae0ac595fd3b20afb669ab9f7f03eb2f6cc839181779dad96bb0ec8e8d6f2ebecf901b0ab6e2e3c05b1a00a392d971fcffaeaf8a42976e2705691ff604878818aedea7887deb84ff1a5c5f57a632ae5baadcebfc8d0d1c6fa615819bde3ec47dee3df134fe0a8f108f7ee262174024cd4a6a7068bd2b94392b41d87789e75125f9674c2c70d1034647df6e0e74aee245afa55066bb1507a915b", &(0x7f0000001980)=""/4096, 0x9, 0x4, 0x0, &(0x7f0000000100)})
sched_setattr(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @usage=0xf704}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x8}}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @usage, 0x8, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x3f]}, {0x0, 0xffffffffffffffff, 0x100000001}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0xffffffffffffffff, [], 0x7f, "c0aff87bd20735"})
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x2, 0x20, 0x0, 0x0})
perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000005c0), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xf70a86956630e51d, 0x0, 0x0, 0x0, 0x0)
08:45:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
08:45:47 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402dd, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:47 executing program 1:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xb240, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 386.149028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 386.158166][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 386.166563][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 386.173608][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 386.194152][T10834] loop1: detected capacity change from 0 to 89
08:45:47 executing program 2:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa469, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
[ 386.200701][T10836] loop2: detected capacity change from 0 to 82
[ 386.206742][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 386.216869][T10842] loop4: detected capacity change from 0 to 513
[ 386.224240][T10842] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 386.227338][T10834] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 386.244775][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 386.253229][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 386.263032][T10834] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 386.263547][T10836] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 386.273020][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 386.287696][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 386.297684][ T1910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 386.306021][T10836] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 386.317415][T10842] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 386.336498][T10834] loop1: detected capacity change from 0 to 89
08:45:47 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x402de, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
08:45:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00\x00Xe\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000060a900000a000100727366703600000018000200140002"], 0x48}}, 0x0)
[ 386.350460][T10834] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[ 386.369467][T10834] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (11 blocks)
[ 386.397821][T10836] loop2: detected capacity change from 0 to 82
[ 386.400735][T10802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 386.404421][T10836] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 386.414471][T10802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 386.435562][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 386.454916][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 386.463028][T10849] loop4: detected capacity change from 0 to 513
[ 386.471426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 386.480919][T10849] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 386.491393][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 386.500509][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 386.510793][T10849] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 386.522360][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 386.531747][T10836] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (10 blocks)
[ 386.541851][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 386.552884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 386.574583][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 386.585840][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 386.612313][ T1918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 386.659319][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 386.672325][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 386.681998][T10802] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 386.801427][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 386.811201][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 386.896412][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 386.906326][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 386.915971][T10802] device veth0_vlan entered promiscuous mode
[ 386.928138][T10802] device veth1_vlan entered promiscuous mode
[ 386.938757][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 386.947856][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 386.955965][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 386.979253][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 386.988500][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 386.997267][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 387.007562][T10802] device veth0_macvtap entered promiscuous mode
[ 387.019837][T10802] device veth1_macvtap entered promiscuous mode
[ 387.031218][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 387.041742][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.051596][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 387.062019][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.071844][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 387.082313][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.092204][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 387.102642][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.112477][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 387.122909][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.138121][T10802] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 387.146317][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 387.156787][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.166641][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 387.177060][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.186975][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 387.197397][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.207286][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 387.217735][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.227539][T10802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 387.237981][T10802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 387.250695][T10802] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 387.263306][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 387.271848][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 387.280001][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 387.288529][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready