last executing test programs: 7.571211162s ago: executing program 2 (id=2697): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) 7.308989124s ago: executing program 2 (id=2698): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001740)=@bloom_filter={0x1e, 0x0, 0xc0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0xf}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001500)={r1, &(0x7f0000001340)="356d509ae418157295795b510fa0459789ff43cd977223262e85025cb890a9648e6b14edd56617615b0dd4b043e60ef3df14d83533cedd8241d08f44dc34941e59d7047d86c3e11d056ca0eb7d3cd342136713fa9f26d1c252b7288f7c21ded3c810792d58edd1ab92becff5e8ff471cc60c13ea293c49f705737f2cd15701078fcf341d588f6a836befa5e9cc0204b60d42a4d3ee175c19a3d0f33b1c2e0ed7e1cd89a97e0192c0a24bdecd9bc5bd8de695f74aa16e7f7a227e4fbf7513fe27de015fab6c2de6630414b1f821c787e1b54d8ff2b80764c4b2b16d66c6", &(0x7f0000001440)=""/142}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x45}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x20, &(0x7f00000034c0)={&(0x7f0000003340)=""/120, 0x78, 0x0, &(0x7f00000033c0)=""/221, 0xdd}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0), 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x0, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="36300000e30000000000000000000000ad83080009000000185b0000030000000000000000000000851000000000000018130000", @ANYRES32=r1, @ANYBLOB="0000000000000000186400001000000000000000000000002f770200ffffffff"], &(0x7f0000000480)='GPL\x00', 0x4, 0xed, &(0x7f0000003240)=""/237, 0x41100, 0x14, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x8c3}, 0x10, r3, r4}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x6d, &(0x7f0000000400)=""/109, 0x41100, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0x8, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="859af4ff0400000018250000", @ANYBLOB="000000000001000018000000010000000000000008000000110a02000100000065d90400f0ffffff8520000002000000770c1013ebf458e24011d999fea3fa9b3cb545f3f269ef081ab2d2406ed44164123d295d2f74229800dee674975395312735c6ee12cf0fafe0f3d7e900345ed22ae53e3122444ae09e931f76dc227569895e40785d0db0d9cba831c72025145d5e90c5b546956f4f1e6fd10dbe53037017c7c08ec14e53d5cd90083db9c12b225a3f5f4c678d1006a8ef3458cea14ccf173a1b931ea78e7b7b6fde06bc13b7811fda9ffcccd9abb4ccd1e71509e9ed8facf2b54c148f225a29a3"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x0, 0x101}, 0x10, r3, r5}, 0x90) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x8, 0x1, 0x0, 0x800, 0x1200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001c40)="a77851ae46c1f97ce2399420e9d8f4aeef757117bf5fc1ded3c89dde090018b7f0164bae63d4bad1157dc596751721805b81dd90aca7df098eddf626c15438a6d69abdaf36f732ea3b9f97d84fefe36def4a4a4515672a70d4c7034da83e0d203d95bdb92ddaff16e150076ff4392c7a4d5025f4f796d778d1cf329f85972c9477f21b8a9e51776f90d06a74c60b39dddddb976571ab67c7c60dabd2313117be77fcf14974398af85bfc34ac19748a17f34c1a546f37210645bae2c46050839caaea3090428cd0ecff45a32dcec7913e9751f0f831230c38acdcdc5fc1bf1ef071f3836a88b2513bb492ba258487174fb82e1582", 0xf4, 0x2000c001, &(0x7f0000001680)={0xa, 0x4e24, 0x9, @remote, 0x1}, 0x1c) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x1) shutdown(r6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x5, &(0x7f0000001b00)=ANY=[@ANYBLOB="18000000000000000000000001000000184a0000e9000085100000000000000000809300000000", @ANYRES32=r0, @ANYBLOB="000000000002000095000000000000009500000000000000"], &(0x7f0000001580)='syzkaller\x00', 0xffffffff, 0x46, &(0x7f00000015c0)=""/70, 0x40f00, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0xf, 0x78, 0x1020000}, 0x10, r3, 0xffffffffffffffff, 0x100000000000001d, &(0x7f00000019c0)=[0xffffffffffffffff], &(0x7f0000001a00)=[{0x2, 0x3, 0xf, 0x6}, {0x4, 0x2}, {0x2, 0x2, 0x4, 0x9}], 0x10, 0xf1ca}, 0x90) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x11, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x1, 0x1, 0xf3, 0x4}, 0x10, r3, r2}, 0x90) syz_open_dev$vcsu(&(0x7f00000002c0), 0x8b, 0x24002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x18, 0x16, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x90) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="95000000f7ffffff18580000000000e6ff95c92080ccd146e300e6ff05000000416789d38da9d7f247d746aa5f15fae977e7a98db45dc6"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x0, 0x1f, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r7, 0x1]}, 0x80) 6.86640612s ago: executing program 2 (id=2708): r0 = syz_io_uring_setup(0x60aa, &(0x7f0000000640), 0x0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x2000ac0a, r1) 4.385010012s ago: executing program 1 (id=2737): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x8007fe, 0x2, 0x0, 0x1, 0x3, 0x1000}, 0x70) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={r0}) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1a11716, &(0x7f0000000500)={[{@barrier}, {@data_err_ignore}], [{@euid_gt}, {@seclabel}, {@uid_eq}, {@fowner_lt}, {@flag='nolazytime'}]}, 0x0, 0x46d, &(0x7f0000001bc0)="$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") ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="349672468b5a30a35d6e7b39fb398900f302555764cdab964245aefbd0", @ANYRES16=0x0, @ANYBLOB="000000000000000000003700000008000300", @ANYRES32=0x0, @ANYBLOB="080026009409000008009f00070000000800570000000000"], 0x34}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x6}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000004003c80c6107d0d9bf5000e0000000000000000004f0e00"], 0x0, 0x2c}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 4.190061748s ago: executing program 1 (id=2741): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="ff", 0x1}], 0x1, 0x205405, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_io_uring_setup(0x16d3, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x9003, 0x0, 0x90, [], 0x0, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x78) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) munmap(&(0x7f0000729000/0x3000)=nil, 0x3000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r6, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7fff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008880) 3.906236061s ago: executing program 1 (id=2743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) 3.830604857s ago: executing program 1 (id=2744): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) 3.31227962s ago: executing program 1 (id=2751): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup2(r0, r2) ioctl$TIOCVHANGUP(r3, 0x89a0, 0x1000000000000) 2.93789834s ago: executing program 2 (id=2709): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1d0ab15000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.834287189s ago: executing program 2 (id=2753): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000440)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703835322c756e695f786c6174653d312c757466383d302c696f636861727365743d6d616363656c7469632c6e6f636173652c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c756e695f786c6174653d312c726f6469722c756e695f786c6174653d312c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c005ddd2c1e456d8fdf568ea771680af643fc3bd36bb18aea5e8c11ba29efe691cfb1fedbf152e1f3a0838c52b9d68a334a071fdc00159cd266414efdea80f68d82ada4326a0d734b7ccf1b608cfb73e35256a8e53be463369417e23bc33279b41dd0704c588c0df4cab87a27b1f6ace44d9338d10582238c1f81c2cda939e73f4c17360af89f58d92e632f8a83cb58faa70aed0000a89bbcab114a1989"], 0x25, 0x354, &(0x7f0000000fc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rename(0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r2, 0x5707b563827c8365, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x10000011) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0xc2980) 2.585575989s ago: executing program 2 (id=2756): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0) 1.497158628s ago: executing program 4 (id=2774): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) timer_create(0x2, &(0x7f0000000080)={0x0, 0x2d}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) (async) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x6}], 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="60dbc0f4aca2fd39", 0x8}], 0x1}}], 0x1, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000540)=ANY=[], 0x2, 0x578, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/45, 0x2d) 1.418365284s ago: executing program 4 (id=2775): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x8007fe, 0x2, 0x0, 0x1, 0x3, 0x1000}, 0x70) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={r0}) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1a11716, &(0x7f0000000500)={[{@barrier}, {@data_err_ignore}], [{@euid_gt}, {@seclabel}, {@uid_eq}, {@fowner_lt}, {@flag='nolazytime'}]}, 0x0, 0x46d, &(0x7f0000001bc0)="$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") ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x6}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000004003c80c6107d0d9bf5000e0000000000000000004f0e00"], 0x0, 0x2c}, 0x20) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.162441095s ago: executing program 3 (id=2782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)=0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000f40)=ANY=[], 0x210) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f0000000500)=[{0x80, 0x3, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}, {0x3, 0xe6, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0xd83f}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = memfd_create(&(0x7f0000000000)='\x107', 0x0) finit_module(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x2000000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', '', [], 0xa, "420cc61326a1f170cd9c4d0947e73c5e0d92637848c7fc7a5d55095d0eb672756a0f528e747c9d9620e80cab7817914a9a346b1c70"}, 0x39) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000340)) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 1.161868915s ago: executing program 4 (id=2783): socket$inet(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.081557542s ago: executing program 4 (id=2786): ioperm(0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x1c8, 0x0, 0xa, 0x9a000000, 0xf0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 969.275871ms ago: executing program 4 (id=2787): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000000)=@ethtool_ts_info}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x40000, 0x0, 0x4, 0x0, &(0x7f0000000780)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setreuid(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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") stat(0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001090000000000000000000a0000002000000000000000000000ac1e000100000000001e00000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x144}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) 372.06451ms ago: executing program 1 (id=2801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001120102000000000000000000000000050001"], 0x24}}, 0x0) 371.92075ms ago: executing program 0 (id=2802): ioperm(0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x1c8, 0x0, 0xa, 0x9a000000, 0xf0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 331.925583ms ago: executing program 3 (id=2804): ioperm(0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x1c8, 0x0, 0xa, 0x9a000000, 0xf0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 242.13467ms ago: executing program 0 (id=2805): creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefe']) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x48, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x98c}]}]}, 0x48}}, 0x40040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) 241.86549ms ago: executing program 0 (id=2806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xd8}}, 0x0) 241.58555ms ago: executing program 0 (id=2807): socket$inet(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 206.933913ms ago: executing program 4 (id=2808): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) chdir(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc1}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setfsuid(0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000240)="e7", 0x1}], 0x1, 0xffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7640, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2276, 0xfffffffffffffffd) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xa}]}, 0x1c}], 0x1}, 0x0) 142.894758ms ago: executing program 3 (id=2809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000000600124000020000f39a0af0c4d15123fd94fe635cdcf5468449f3043b31f05caaff9976b08aad424ffe3c347ba7"], 0x9c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e"], 0x70}}, 0x0) 89.619402ms ago: executing program 3 (id=2810): r0 = syz_io_uring_setup(0x60aa, &(0x7f0000000640), &(0x7f0000004000), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x2000ac0a, r1) 89.127332ms ago: executing program 0 (id=2811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000004e40)=[{{&(0x7f0000000080)={0x22, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}}, {{&(0x7f00000005c0)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x0) 25.148688ms ago: executing program 3 (id=2812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000500)={'nat\x00', 0x0, 0x3, 0x78, [0xdec, 0xfffffffffffffffb, 0x3, 0x6, 0x6, 0x8], 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)=""/120}, &(0x7f0000000440)=0x78) clock_gettime(0x7, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000005c0)='kfree\x00', r0}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x64240, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}, 0x2298, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0xd80, &(0x7f0000000600)={0x0, 0x20, 0x20}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x10) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xc0fe, 0x2, 0x398a, 0x2104, r9, 0x7fffffff, '\x00', 0x0, r10, 0x2, 0x2, 0x1, 0xa}, 0x48) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_START_POLL(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r12, 0x1, 0x0, 0x0, {0x3}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(r7, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505331, &(0x7f0000000480)={{0x8, 0x8}, {0x11}, 0x3f, 0x4, 0x6}) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 11.021349ms ago: executing program 3 (id=2813): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) 0s ago: executing program 0 (id=2814): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x8007fe, 0x2, 0x0, 0x1, 0x3, 0x1000}, 0x70) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={r0}) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1a11716, &(0x7f0000000500)={[{@barrier}, {@data_err_ignore}], [{@euid_gt}, {@seclabel}, {@uid_eq}, {@fowner_lt}, {@flag='nolazytime'}]}, 0x0, 0x46d, &(0x7f0000001bc0)="$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") ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="349672468b5a30a35d6e7b39fb398900f302555764cdab964245aefbd0", @ANYRES16=0x0, @ANYBLOB="000000000000000000003700000008000300", @ANYRES32=0x0, @ANYBLOB="080026009409000008009f00070000000800570000000000"], 0x34}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x6}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000004003c80c6107d0d9bf5000e0000000000000000004f0e00"], 0x0, 0x2c}, 0x20) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ap_create } for pid=16951 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.054779][ T29] audit: type=1400 audit(1720042722.542:4435): avc: denied { write } for pid=16951 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.075256][ T29] audit: type=1400 audit(1720042722.542:4436): avc: denied { read } for pid=16951 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.097130][ T29] audit: type=1400 audit(1720042722.592:4437): avc: denied { read } for pid=16956 comm="syz.3.2470" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.102341][T16972] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz.3.2470: Abort forced by user [ 171.131760][T16972] EXT4-fs (loop3): Remounting filesystem read-only [ 171.139524][T16610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.146663][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.173097][T16610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.189379][T16610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.196776][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.223689][T16610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.242893][T16968] loop2: p1 < > p4 [ 171.257213][T16968] loop2: p4 size 8388608 extends beyond EOD, truncated [ 171.269698][T17000] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 171.287940][T16610] hsr_slave_0: entered promiscuous mode [ 171.309693][T16610] hsr_slave_1: entered promiscuous mode [ 171.312450][T17000] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 171.329652][T16610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.338518][T16610] Cannot create hsr debugfs directory [ 171.378426][T17050] loop1: detected capacity change from 0 to 1024 [ 171.394129][T17050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.437678][T17050] EXT4-fs error (device loop1): __ext4_remount:6503: comm syz.1.2474: Abort forced by user [ 171.477453][T17050] EXT4-fs (loop1): Remounting filesystem read-only [ 171.542655][T14910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.586692][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.600607][T17118] loop2: detected capacity change from 0 to 2048 [ 171.617964][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.635862][T17118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.651657][T17128] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.661057][T17128] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.674653][T17128] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.679429][T17118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.688889][T17132] FAULT_INJECTION: forcing a failure. [ 171.688889][T17132] name failslab, interval 1, probability 0, space 0, times 0 [ 171.709350][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.720625][T17132] CPU: 0 PID: 17132 Comm: syz.3.2477 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 171.720653][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.720666][T17132] Call Trace: [ 171.720676][T17132] [ 171.739879][T17128] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.744211][T17132] dump_stack_lvl+0xf2/0x150 [ 171.744255][T17132] dump_stack+0x15/0x20 [ 171.755606][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.758532][T17132] should_fail_ex+0x229/0x230 [ 171.763954][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.772745][T17132] ? sidtab_sid2str_get+0xb8/0x140 [ 171.772781][T17132] __should_failslab+0x92/0xa0 [ 171.772805][T17132] should_failslab+0x9/0x20 [ 171.772855][T17132] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 171.779240][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.784602][T17132] kmemdup_noprof+0x2a/0x60 [ 171.784640][T17132] sidtab_sid2str_get+0xb8/0x140 [ 171.795623][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 171.800530][T17132] security_sid_to_context_core+0x1eb/0x2f0 [ 171.811687][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 171.816894][T17132] security_sid_to_context+0x27/0x30 [ 171.823182][T17120] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 171.827699][T17132] avc_audit_post_callback+0x10d/0x530 [ 171.903289][T17132] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 171.909852][T17132] common_lsm_audit+0x7d0/0xfc0 [ 171.915115][T17132] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 171.922171][T17132] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 171.928725][T17132] slow_avc_audit+0xf9/0x140 [ 171.935420][T17132] avc_has_extended_perms+0x595/0x820 [ 171.941933][T17132] ioctl_has_perm+0x28b/0x2e0 [ 171.948207][T17132] selinux_file_ioctl+0x2f7/0x380 [ 171.954095][T17132] ? __fget_files+0x1da/0x210 [ 171.959234][T17132] security_file_ioctl+0x4b/0x80 [ 171.964496][T17132] __se_sys_ioctl+0x47/0x150 [ 171.970603][T17132] __x64_sys_ioctl+0x43/0x50 [ 171.975389][T17132] x64_sys_call+0x1581/0x2d70 [ 171.981697][T17132] do_syscall_64+0xc9/0x1c0 [ 171.987907][T17132] ? clear_bhb_loop+0x55/0xb0 [ 171.992878][T17132] ? clear_bhb_loop+0x55/0xb0 [ 171.998419][T17132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.006472][T17132] RIP: 0033:0x7f29d545fbd9 [ 172.012343][T17132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.034568][T17132] RSP: 002b:00007f29d46e1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.044532][T17132] RAX: ffffffffffffffda RBX: 00007f29d55edf60 RCX: 00007f29d545fbd9 [ 172.053740][T17132] RDX: 00000000200003c0 RSI: 000000000000890b RDI: 0000000000000003 [ 172.062182][T17132] RBP: 00007f29d46e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.070914][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.079000][T17132] R13: 000000000000000b R14: 00007f29d55edf60 R15: 00007fffb0075138 [ 172.087058][T17132] [ 172.097297][T17128] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 172.143816][T13042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.163270][T16610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.176290][T16610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.194549][T16610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.207059][T16610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.220113][T17161] FAULT_INJECTION: forcing a failure. [ 172.220113][T17161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.234021][T17161] CPU: 0 PID: 17161 Comm: syz.3.2482 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 172.245019][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.255844][T17161] Call Trace: [ 172.260299][T17161] [ 172.261881][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.263334][T17161] dump_stack_lvl+0xf2/0x150 [ 172.263372][T17161] dump_stack+0x15/0x20 [ 172.263397][T17161] should_fail_ex+0x229/0x230 [ 172.278650][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.281200][T17161] should_fail+0xb/0x10 [ 172.297984][T17161] should_fail_usercopy+0x1a/0x20 [ 172.303418][T17161] _copy_from_user+0x1e/0xd0 [ 172.305687][T16610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.308871][T17161] copy_msghdr_from_user+0x54/0x2a0 [ 172.308919][T17161] __sys_sendmsg+0x17d/0x280 [ 172.320537][T16610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.326780][T17161] __x64_sys_sendmsg+0x46/0x50 [ 172.337403][T17160] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2480'. [ 172.344333][T17161] x64_sys_call+0xb25/0x2d70 [ 172.344415][T17161] do_syscall_64+0xc9/0x1c0 [ 172.369152][T17161] ? clear_bhb_loop+0x55/0xb0 [ 172.374944][T17161] ? clear_bhb_loop+0x55/0xb0 [ 172.379722][T17161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.387145][T17161] RIP: 0033:0x7f29d545fbd9 [ 172.392731][T17161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.417144][T17161] RSP: 002b:00007f29d46e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.427264][T17161] RAX: ffffffffffffffda RBX: 00007f29d55edf60 RCX: 00007f29d545fbd9 [ 172.437917][T17161] RDX: 0000000000000000 RSI: 00000000200018c0 RDI: 0000000000000003 [ 172.446379][T17161] RBP: 00007f29d46e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.455534][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.464170][T17161] R13: 000000000000000b R14: 00007f29d55edf60 R15: 00007fffb0075138 [ 172.474473][T17161] [ 172.482038][T16489] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 172.501116][T17160] 1猉功D: entered promiscuous mode [ 172.507795][T17160] 1猉功D: left allmulticast mode [ 172.522399][T16489] EXT4-fs (loop2): Remounting filesystem read-only [ 172.533448][T10184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.535786][T17173] loop3: detected capacity change from 0 to 2048 [ 172.546687][T17164] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2480'. [ 172.564672][T17164] 0猉功D: renamed from 31猉功D [ 172.571315][T17164] 0猉功D: left promiscuous mode [ 172.577137][T17164] 0猉功D: entered allmulticast mode [ 172.586317][T17164] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 172.612394][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.621620][T17173] loop3: p1 < > p4 [ 172.625864][ T8107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.636357][T17180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 172.646613][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.652107][T17173] loop3: p4 size 8388608 extends beyond EOD, [ 172.662436][ T8107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.680841][T17173] truncated [ 172.732333][T17186] loop0: detected capacity change from 0 to 2048 [ 172.747445][T16610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.810496][T17186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.856738][T17173] loop3: detected capacity change from 0 to 512 [ 172.870717][T11753] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.896154][T16610] veth0_vlan: entered promiscuous mode [ 172.904856][T16610] veth1_vlan: entered promiscuous mode [ 172.925734][T16610] veth0_macvtap: entered promiscuous mode [ 172.938375][T16610] veth1_macvtap: entered promiscuous mode [ 172.949957][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.961036][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.963517][T17217] loop0: detected capacity change from 0 to 1024 [ 172.971497][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.971515][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.983827][T17217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.990203][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.990221][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.990279][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.049899][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.069067][T17217] EXT4-fs error (device loop0): __ext4_remount:6503: comm syz.0.2489: Abort forced by user [ 173.077136][T16610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.087661][T17217] EXT4-fs (loop0): Remounting filesystem read-only [ 173.092606][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.105053][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.114907][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.125482][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.135669][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.146587][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.156779][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.167591][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.180315][T16610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.194504][T17227] loop3: detected capacity change from 0 to 512 [ 173.204472][T16610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.213763][T16610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.223024][T16610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.230202][T17235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.232296][T16610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.256493][T17235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.306980][T17236] loop1: detected capacity change from 0 to 2048 [ 173.314902][T17236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.330460][T17244] netlink: 'syz.4.2442': attribute type 10 has an invalid length. [ 173.332581][T17242] loop3: detected capacity change from 0 to 512 [ 173.342724][T17235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.360928][T17244] team0: Port device netdevsim1 added [ 173.372133][T17235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.387857][T17244] netlink: 'syz.4.2442': attribute type 10 has an invalid length. [ 173.392838][T17235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.411678][T17236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.417869][T17244] team0: Port device netdevsim1 removed [ 173.427721][T17235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.437173][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.456454][T17242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.458566][T17244] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 173.472466][T17242] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.497896][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.521926][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.531174][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.541732][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 173.552447][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 173.562488][T17245] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 173.565833][T17235] netlink: 'syz.0.2489': attribute type 10 has an invalid length. [ 173.637859][T17267] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2499'. [ 173.641969][T17242] loop3: detected capacity change from 512 to 0 [ 173.653394][T17267] gretap0: entered promiscuous mode [ 173.655748][T17242] syz.3.2495: attempt to access beyond end of device [ 173.655748][T17242] loop3: rw=12288, sector=84, nr_sectors = 4 limit=0 [ 173.674484][T11753] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.681864][T17242] syz.3.2495: attempt to access beyond end of device [ 173.681864][T17242] loop3: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 173.691830][T17267] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2499'. [ 173.699792][T17242] EXT4-fs error (device loop3): ext4_write_dquot:6840: comm syz.3.2495: Failed to commit dquot type 1 [ 173.709501][T17270] loop2: detected capacity change from 0 to 164 [ 173.723494][T17242] syz.3.2495: attempt to access beyond end of device [ 173.723494][T17242] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 173.735349][T17267] 0猉功D: renamed from gretap0 [ 173.738967][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 173.753804][T17267] 0猉功D: left promiscuous mode [ 173.755115][T17260] syz.3.2495: attempt to access beyond end of device [ 173.755115][T17260] loop3: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 173.758788][T17267] 0猉功D: entered allmulticast mode [ 173.773381][T17260] EXT4-fs error (device loop3): __ext4_find_entry:1684: inode #2: comm syz.3.2495: reading directory lblock 0 [ 173.778841][T17267] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 173.789211][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 173.804898][T17270] Unable to read rock-ridge attributes [ 173.819317][T17260] syz.3.2495: attempt to access beyond end of device [ 173.819317][T17260] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 173.832734][T17260] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 173.841660][T17260] EXT4-fs (loop3): I/O error while writing superblock [ 173.841782][T17242] syz.3.2495: attempt to access beyond end of device [ 173.841782][T17242] loop3: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 173.868018][T17270] vlan2: entered promiscuous mode [ 173.875817][T17242] syz.3.2495: attempt to access beyond end of device [ 173.875817][T17242] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 173.880390][T17279] loop0: detected capacity change from 0 to 512 [ 173.892187][T17242] syz.3.2495: attempt to access beyond end of device [ 173.892187][T17242] loop3: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 173.901973][T17279] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 173.924622][T17242] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.3.2495: unable to read itable block [ 173.930377][T17279] EXT4-fs (loop0): Remounting filesystem read-only [ 173.938893][T17242] syz.3.2495: attempt to access beyond end of device [ 173.938893][T17242] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 173.960686][T17279] EXT4-fs (loop0): 1 truncate cleaned up [ 173.964508][T17279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.966924][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 173.989013][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 173.996163][T17242] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 173.998062][T17284] loop4: detected capacity change from 0 to 1024 [ 174.005910][T17242] syz.3.2495: attempt to access beyond end of device [ 174.005910][T17242] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 174.016463][T17279] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 174.026184][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.036965][T17279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.041418][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 174.052681][T17284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.057452][T17242] EXT4-fs error (device loop3): ext4_ext_truncate:4432: inode #19: comm syz.3.2495: mark_inode_dirty error [ 174.082834][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.095397][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 174.102177][T17284] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 174.105888][T17242] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.3.2495: unable to read itable block [ 174.116200][T13042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.139808][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.150382][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 174.157694][T17242] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 174.166760][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.176635][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 174.184352][T17242] EXT4-fs error (device loop3): ext4_truncate:4162: inode #19: comm syz.3.2495: mark_inode_dirty error [ 174.198037][T17242] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.207727][T17242] EXT4-fs (loop3): I/O error while writing superblock [ 174.215961][T16610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.230418][T17298] loop2: detected capacity change from 0 to 512 [ 174.238745][T17298] journal_path: Lookup failure for './file1' [ 174.242554][T17279] ref_ctr_offset mismatch. inode: 0x35c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 174.245981][T17298] EXT4-fs: error: could not find journal device path [ 174.265497][T17296] loop1: detected capacity change from 0 to 2048 [ 174.274265][T14910] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 174.293921][T14910] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.301998][T17304] netlink: 'syz.4.2506': attribute type 10 has an invalid length. [ 174.303944][T14910] EXT4-fs (loop3): I/O error while writing superblock [ 174.319330][T14910] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 174.321046][T17296] loop1: p2 < > [ 174.333100][T14910] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 174.347056][T17298] loop2: detected capacity change from 0 to 1024 [ 174.354708][T17304] bond0: (slave netdevsim1): Releasing backup interface [ 174.357718][T17298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.377827][T17304] team0: Port device netdevsim1 added [ 174.385449][T17308] netlink: 'syz.4.2506': attribute type 10 has an invalid length. [ 174.408886][T17308] team0: Port device netdevsim1 removed [ 174.417784][T17308] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 174.426857][T17322] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2512'. [ 174.436204][T17298] vhci_hcd: invalid port number 97 [ 174.442357][T17298] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 174.465106][T10184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.469772][T17325] loop1: detected capacity change from 0 to 1024 [ 174.509921][T17329] loop4: detected capacity change from 0 to 2048 [ 174.511629][T17322] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2512'. [ 174.528964][T17322] 1猉功D: renamed from 30猉功D [ 174.535538][T17325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.551599][T17329] loop4: p1 < > p4 [ 174.557290][T17322] 1猉功D: left promiscuous mode [ 174.562241][T17322] 1猉功D: entered allmulticast mode [ 174.568136][T17329] loop4: p4 size 8388608 extends beyond EOD, truncated [ 174.569751][T17322] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 174.590984][T17347] loop2: detected capacity change from 0 to 512 [ 174.596888][T17325] EXT4-fs error (device loop1): __ext4_remount:6503: comm syz.1.2510: Abort forced by user [ 174.609894][T17325] EXT4-fs (loop1): Remounting filesystem read-only [ 174.622710][T17347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.636775][T17347] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.668138][T17329] loop4: detected capacity change from 0 to 512 [ 174.686086][T17357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 174.705550][T17357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 174.717599][T17357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 174.730937][T17357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 174.740020][T17347] loop2: detected capacity change from 512 to 0 [ 174.749291][T17347] EXT4-fs error (device loop2): ext4_write_dquot:6840: comm syz.2.2517: Failed to commit dquot type 1 [ 174.774189][T17357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 174.783369][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.792301][T17347] EXT4-fs error (device loop2): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.2.2517: unable to read itable block [ 174.806160][T17357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 174.810331][ T336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.816113][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.832930][T17347] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: IO failure [ 174.846369][T17365] EXT4-fs error (device loop2): __ext4_find_entry:1684: inode #2: comm syz.2.2517: reading directory lblock 0 [ 174.858515][T17365] EXT4-fs (loop2): I/O error while writing superblock [ 174.867727][T17361] netlink: 'syz.1.2510': attribute type 10 has an invalid length. [ 174.878107][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.885457][T17347] EXT4-fs error (device loop2): ext4_ext_truncate:4432: inode #19: comm syz.2.2517: mark_inode_dirty error [ 174.897841][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.903495][ T336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.905201][T17347] EXT4-fs error (device loop2): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.2.2517: unable to read itable block [ 174.928759][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.935740][T17347] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: IO failure [ 174.939068][T13042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.947282][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.962655][T17347] EXT4-fs error (device loop2): ext4_truncate:4162: inode #19: comm syz.2.2517: mark_inode_dirty error [ 174.974253][T17347] EXT4-fs (loop2): I/O error while writing superblock [ 174.995713][ T336] bond0: (slave netdevsim1): Releasing backup interface [ 175.013594][ T336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.039110][T17380] loop1: detected capacity change from 0 to 128 [ 175.043469][T10184] EXT4-fs error (device loop2): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 175.071696][T10184] EXT4-fs (loop2): I/O error while writing superblock [ 175.078526][T10184] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: IO failure [ 175.095943][ T336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.145617][T17390] netlink: 'syz.1.2523': attribute type 10 has an invalid length. [ 175.163598][T17390] bond0: (slave netdevsim1): Releasing backup interface [ 175.172757][T17390] team0: Port device netdevsim1 added [ 175.191140][T17407] loop4: detected capacity change from 0 to 128 [ 175.199486][T17390] netlink: 'syz.1.2523': attribute type 10 has an invalid length. [ 175.208656][T17407] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 175.219996][T17407] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 175.220099][T17390] team0: Port device netdevsim1 removed [ 175.241595][T17390] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 175.244321][T17416] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.2525: No space for directory leaf checksum. Please run e2fsck -D. [ 175.266191][T17416] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz.4.2525: checksumming directory block 0 [ 175.314276][ T336] bridge_slave_1: left allmulticast mode [ 175.319990][ T336] bridge_slave_1: left promiscuous mode [ 175.325962][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.345822][ T336] bridge_slave_0: left allmulticast mode [ 175.346043][T16610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.351700][ T336] bridge_slave_0: left promiscuous mode [ 175.367431][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.452830][ T336] team0: Port device vlan2 removed [ 175.465885][T17491] loop0: detected capacity change from 0 to 512 [ 175.483069][T17491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.497690][T17491] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.507003][T17485] loop4: detected capacity change from 0 to 8192 [ 175.530539][ T336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.543004][ T336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.554106][ T336] bond0 (unregistering): Released all slaves [ 175.563380][ T336] bond1 (unregistering): Released all slaves [ 175.571489][T17491] loop0: detected capacity change from 512 to 0 [ 175.589196][T17491] EXT4-fs error (device loop0): ext4_write_dquot:6840: comm syz.0.2532: Failed to commit dquot type 1 [ 175.606533][T17491] EXT4-fs (loop0): I/O error while writing superblock [ 175.614314][T17491] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.0.2532: unable to read itable block [ 175.631280][T17491] EXT4-fs (loop0): I/O error while writing superblock [ 175.632249][T17366] chnl_net:caif_netlink_parms(): no params data found [ 175.638178][T17491] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 175.657514][T17542] EXT4-fs error (device loop0): __ext4_find_entry:1684: inode #2: comm syz.0.2532: reading directory lblock 0 [ 175.674885][T17491] EXT4-fs (loop0): I/O error while writing superblock [ 175.677726][T17542] EXT4-fs (loop0): previous I/O error to superblock detected [ 175.682328][T17491] EXT4-fs error (device loop0): ext4_ext_truncate:4432: inode #19: comm syz.0.2532: mark_inode_dirty error [ 175.704781][T17542] EXT4-fs (loop0): I/O error while writing superblock [ 175.705977][T17491] EXT4-fs (loop0): previous I/O error to superblock detected [ 175.720596][T17491] EXT4-fs (loop0): I/O error while writing superblock [ 175.721415][T17556] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2535'. [ 175.728711][T17491] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.0.2532: unable to read itable block [ 175.752475][T17556] 0猉功D: entered promiscuous mode [ 175.757996][T17556] 0猉功D: left allmulticast mode [ 175.763741][T17491] EXT4-fs (loop0): I/O error while writing superblock [ 175.770824][T17491] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 175.780499][T17491] EXT4-fs (loop0): I/O error while writing superblock [ 175.788112][T17491] EXT4-fs error (device loop0): ext4_truncate:4162: inode #19: comm syz.0.2532: mark_inode_dirty error [ 175.804207][ T336] hsr_slave_0: left promiscuous mode [ 175.810801][ T336] hsr_slave_1: left promiscuous mode [ 175.816895][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.824504][ T336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.833334][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.841092][ T336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.842343][T11753] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 175.862275][T11753] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 175.873180][ T336] veth1_macvtap: left promiscuous mode [ 175.878750][ T336] veth0_macvtap: left promiscuous mode [ 175.884461][ T336] veth1_vlan: left promiscuous mode [ 175.889721][ T336] veth0_vlan: left promiscuous mode [ 175.918661][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 175.918679][ T29] audit: type=1326 audit(1720042727.602:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.4.2535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ba5f3bd9 code=0x0 [ 176.008490][ T336] team0 (unregistering): Port device team_slave_1 removed [ 176.019545][ T336] team0 (unregistering): Port device team_slave_0 removed [ 176.063365][T17566] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2535'. [ 176.072788][T17566] 1猉功D: renamed from 30猉功D [ 176.079466][T17566] 1猉功D: left promiscuous mode [ 176.084620][T17566] 1猉功D: entered allmulticast mode [ 176.092072][T17566] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 176.166709][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.174362][T17366] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.182801][T17366] bridge_slave_0: entered allmulticast mode [ 176.189796][T17366] bridge_slave_0: entered promiscuous mode [ 176.202742][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.210763][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.218482][T17366] bridge_slave_1: entered allmulticast mode [ 176.225201][T17366] bridge_slave_1: entered promiscuous mode [ 176.233349][ T29] audit: type=1400 audit(1720042727.922:4537): avc: denied { read } for pid=17630 comm="syz.1.2539" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.260015][ T29] audit: type=1400 audit(1720042727.922:4538): avc: denied { open } for pid=17630 comm="syz.1.2539" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.285018][ T29] audit: type=1400 audit(1720042727.932:4539): avc: denied { ioctl } for pid=17630 comm="syz.1.2539" path="socket:[39614]" dev="sockfs" ino=39614 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.332189][T17366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.343874][T17366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.371214][T17366] team0: Port device team_slave_0 added [ 176.378010][T17366] team0: Port device team_slave_1 added [ 176.413296][T17366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.421033][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.448569][T17366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.461595][T17366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.469157][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.495807][T17366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.519031][T17680] loop1: detected capacity change from 0 to 8192 [ 176.531308][ T29] audit: type=1326 audit(1720042728.212:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ba5f3bd9 code=0x7ffc0000 [ 176.568050][ T29] audit: type=1326 audit(1720042728.222:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91ba5f3bd9 code=0x7ffc0000 [ 176.592868][ T29] audit: type=1326 audit(1720042728.222:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ba5f3bd9 code=0x7ffc0000 [ 176.618297][ T29] audit: type=1326 audit(1720042728.222:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f91ba5f3bd9 code=0x7ffc0000 [ 176.644355][ T29] audit: type=1326 audit(1720042728.222:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ba5f3bd9 code=0x7ffc0000 [ 176.672724][ T29] audit: type=1326 audit(1720042728.222:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ba5f3bd9 code=0x7ffc0000 [ 176.718712][T17816] loop4: detected capacity change from 0 to 128 [ 176.727922][T17816] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 176.750148][T17816] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 176.770437][T17816] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.2546: No space for directory leaf checksum. Please run e2fsck -D. [ 176.790866][T17816] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz.4.2546: checksumming directory block 0 [ 176.810075][T17366] hsr_slave_0: entered promiscuous mode [ 176.810282][T17816] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.2546: No space for directory leaf checksum. Please run e2fsck -D. [ 176.833909][T17816] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz.4.2546: checksumming directory block 0 [ 176.850610][T17366] hsr_slave_1: entered promiscuous mode [ 176.854427][T17816] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.2546: No space for directory leaf checksum. Please run e2fsck -D. [ 176.875203][T17816] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz.4.2546: checksumming directory block 0 [ 176.895581][ T336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.909964][T17486] chnl_net:caif_netlink_parms(): no params data found [ 176.958214][ T336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.989473][T16610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.020145][ T336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.041449][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.051775][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.061931][T17486] bridge_slave_0: entered allmulticast mode [ 177.068917][T17486] bridge_slave_0: entered promiscuous mode [ 177.077656][T17951] loop4: detected capacity change from 0 to 1024 [ 177.078042][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.093689][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.101419][T17486] bridge_slave_1: entered allmulticast mode [ 177.108598][T17486] bridge_slave_1: entered promiscuous mode [ 177.109642][T17951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.142501][ T336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.154927][T16610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.198318][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.217125][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.234388][T18011] FAULT_INJECTION: forcing a failure. [ 177.234388][T18011] name failslab, interval 1, probability 0, space 0, times 0 [ 177.249272][T18011] CPU: 1 PID: 18011 Comm: syz.4.2549 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 177.261184][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.271957][T18011] Call Trace: [ 177.275482][T18011] [ 177.278490][T18011] dump_stack_lvl+0xf2/0x150 [ 177.283193][T18011] dump_stack+0x15/0x20 [ 177.288559][T18011] should_fail_ex+0x229/0x230 [ 177.293451][T18011] ? fib_create_info+0x6c9/0x1500 [ 177.298697][T18011] __should_failslab+0x92/0xa0 [ 177.303596][T18011] should_failslab+0x9/0x20 [ 177.310893][T18011] __kmalloc_noprof+0xa5/0x370 [ 177.316336][T18011] fib_create_info+0x6c9/0x1500 [ 177.321231][T18011] ? fib_trie_table+0xb4/0xf0 [ 177.326333][T18011] fib_table_insert+0x101/0xfa0 [ 177.332044][T18011] ? fib_trie_table+0xce/0xf0 [ 177.337903][T18011] inet_rtm_newroute+0xa3/0x140 [ 177.343631][T18011] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 177.350542][T18011] rtnetlink_rcv_msg+0x85e/0x910 [ 177.356387][T18011] ? memcg_list_lru_alloc+0xd2/0x740 [ 177.361910][T18011] ? mod_objcg_state+0x2e2/0x4e0 [ 177.367221][T18011] ? xas_load+0x3ae/0x3d0 [ 177.372793][T18011] ? skb_release_data+0x583/0x5a0 [ 177.378960][T18011] ? kmem_cache_free+0xd8/0x280 [ 177.384708][T18011] ? nlmon_xmit+0x51/0x60 [ 177.389459][T18011] ? __kfree_skb+0x102/0x150 [ 177.395022][T18011] ? consume_skb+0x57/0x180 [ 177.401123][T18011] ? nlmon_xmit+0x51/0x60 [ 177.405552][T18011] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 177.411178][T18011] ? __dev_queue_xmit+0xb21/0x1e50 [ 177.416507][T18011] ? ref_tracker_free+0x3a5/0x410 [ 177.421886][T18011] netlink_rcv_skb+0x12c/0x230 [ 177.428159][T18011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.434664][T18011] rtnetlink_rcv+0x1c/0x30 [ 177.440376][T18011] netlink_unicast+0x58d/0x660 [ 177.446247][T18011] netlink_sendmsg+0x5ca/0x6e0 [ 177.451867][T18011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.458995][T18011] __sock_sendmsg+0x140/0x180 [ 177.464404][T18011] ____sys_sendmsg+0x312/0x410 [ 177.470992][T18011] __sys_sendmsg+0x1e9/0x280 [ 177.476519][T18011] __x64_sys_sendmsg+0x46/0x50 [ 177.481674][T18011] x64_sys_call+0xb25/0x2d70 [ 177.486705][T18011] do_syscall_64+0xc9/0x1c0 [ 177.491508][T18011] ? clear_bhb_loop+0x55/0xb0 [ 177.496592][T18011] ? clear_bhb_loop+0x55/0xb0 [ 177.501920][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.507945][T18011] RIP: 0033:0x7f91ba5f3bd9 [ 177.514671][T18011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.534902][T18011] RSP: 002b:00007f91b9875048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.543631][T18011] RAX: ffffffffffffffda RBX: 00007f91ba781f60 RCX: 00007f91ba5f3bd9 [ 177.552028][T18011] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 177.561397][T18011] RBP: 00007f91b98750a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.569494][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.579159][T18011] R13: 000000000000000b R14: 00007f91ba781f60 R15: 00007ffc15e8e568 [ 177.588797][T18011] [ 177.620169][T17486] team0: Port device team_slave_0 added [ 177.634822][T18048] netlink: 'syz.4.2550': attribute type 10 has an invalid length. [ 177.652285][T18048] bond0: (slave netdevsim1): Releasing backup interface [ 177.661754][T18048] team0: Port device netdevsim1 added [ 177.669167][T17486] team0: Port device team_slave_1 added [ 177.685452][T18086] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2551'. [ 177.695527][T18086] 0猉功D: entered promiscuous mode [ 177.700757][T18086] 0猉功D: left allmulticast mode [ 177.716492][T18087] netlink: 'syz.4.2550': attribute type 10 has an invalid length. [ 177.734197][T18087] team0: Port device netdevsim1 removed [ 177.742629][T18087] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 177.770302][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.778536][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.806521][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.818791][T18123] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2551'. [ 177.828500][T18123] 1猉功D: renamed from 30猉功D [ 177.837253][T18123] 1猉功D: left promiscuous mode [ 177.843028][T18123] 1猉功D: entered allmulticast mode [ 177.850738][T18123] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 177.876823][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.883885][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.898215][T18154] loop4: detected capacity change from 0 to 8192 [ 177.913261][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.960552][T17720] chnl_net:caif_netlink_parms(): no params data found [ 177.974754][T17486] hsr_slave_0: entered promiscuous mode [ 177.981463][T17486] hsr_slave_1: entered promiscuous mode [ 177.988298][T17486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.997081][T17486] Cannot create hsr debugfs directory [ 178.011283][ T336] bridge_slave_1: left allmulticast mode [ 178.017189][ T336] bridge_slave_1: left promiscuous mode [ 178.023142][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.033629][ T336] bridge_slave_0: left allmulticast mode [ 178.040145][ T336] bridge_slave_0: left promiscuous mode [ 178.046081][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.073014][T18225] loop4: detected capacity change from 0 to 512 [ 178.094903][T18225] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.143231][ T336] bond1 (unregistering): Released all slaves [ 178.161212][T18225] loop4: detected capacity change from 512 to 0 [ 178.202263][T16610] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 178.221281][T16610] EXT4-fs (loop4): I/O error while writing superblock [ 178.228185][T16610] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 178.237161][T16610] EXT4-fs (loop4): I/O error while writing superblock [ 178.244170][T16610] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 178.255817][T16610] EXT4-fs (loop4): I/O error while writing superblock [ 178.269047][T12488] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #4: block 34: comm kworker/u8:8: unable to read itable block [ 178.284963][T12488] EXT4-fs (loop4): I/O error while writing superblock [ 178.292994][T17720] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.300223][T17720] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.307843][T12488] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:8: unable to read itable block [ 178.310468][T17720] bridge_slave_0: entered allmulticast mode [ 178.321927][T12488] EXT4-fs (loop4): I/O error while writing superblock [ 178.330891][T17720] bridge_slave_0: entered promiscuous mode [ 178.335022][T12488] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #19: block 35: comm kworker/u8:8: unable to read itable block [ 178.356438][T12488] EXT4-fs (loop4): I/O error while writing superblock [ 178.363502][T12488] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:8: unable to read itable block [ 178.368187][T17366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.377783][T12488] EXT4-fs (loop4): I/O error while writing superblock [ 178.394437][T16610] EXT4-fs (loop4): I/O error while writing superblock [ 178.394976][T17366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.412221][T17720] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.419474][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.427155][T17720] bridge_slave_1: entered allmulticast mode [ 178.434968][T17720] bridge_slave_1: entered promiscuous mode [ 178.466250][T17366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.478023][T17366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.489333][ T336] hsr_slave_0: left promiscuous mode [ 178.496406][ T336] hsr_slave_1: left promiscuous mode [ 178.502522][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.509958][ T336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.518470][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.526037][ T336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.535984][ T336] veth1_macvtap: left promiscuous mode [ 178.541627][ T336] veth0_macvtap: left promiscuous mode [ 178.546946][T18365] block device autoloading is deprecated and will be removed. [ 178.547244][ T336] veth1_vlan: left promiscuous mode [ 178.560504][ T336] veth0_vlan: left promiscuous mode [ 178.662968][ T336] team0 (unregistering): Port device team_slave_1 removed [ 178.674631][ T336] team0 (unregistering): Port device team_slave_0 removed [ 178.719652][T17720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.730453][T17720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.740022][T18381] netlink: 'syz.1.2561': attribute type 10 has an invalid length. [ 178.754587][T18381] bond0: (slave netdevsim1): Releasing backup interface [ 178.763821][T18381] team0: Port device netdevsim1 added [ 178.769802][T18384] netlink: 'syz.1.2561': attribute type 10 has an invalid length. [ 178.782250][T18384] team0: Port device netdevsim1 removed [ 178.790829][T18384] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 178.812594][T17486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.841862][T18388] netlink: 'syz.1.2562': attribute type 4 has an invalid length. [ 178.853479][T18388] loop1: detected capacity change from 0 to 512 [ 178.862873][T17720] team0: Port device team_slave_0 added [ 178.872551][T17720] team0: Port device team_slave_1 added [ 178.880149][T18388] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.903128][T17486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.942306][T17720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.949881][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.977203][T17720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.997036][T17720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.004719][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.033745][T17720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.079551][T17486] bond0: (slave netdevsim1): Releasing backup interface [ 179.094623][T17486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.133314][T17720] hsr_slave_0: entered promiscuous mode [ 179.140265][T17720] hsr_slave_1: entered promiscuous mode [ 179.148342][T17720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.157105][T17720] Cannot create hsr debugfs directory [ 179.198296][T17486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.269068][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.382935][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.400229][T17486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.409194][T17486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.428573][T17486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.438655][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.446401][ T8103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.459797][T17486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.476506][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.485030][ T8103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.530366][T17366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.563318][T17486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.581335][T17486] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.592116][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.599851][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.621607][ T3222] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.629673][ T3222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.643774][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.745934][T17720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.758929][T17366] veth0_vlan: entered promiscuous mode [ 179.765747][T17720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.776674][T17720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.790851][T17366] veth1_vlan: entered promiscuous mode [ 179.808121][T17720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.849553][T17366] veth0_macvtap: entered promiscuous mode [ 179.871561][T17366] veth1_macvtap: entered promiscuous mode [ 179.888981][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.900534][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.910989][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.922522][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.933168][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.944904][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.956350][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.966439][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.979624][T17720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.987086][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.997621][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.007861][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.018486][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.028371][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.039247][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.052186][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.062732][T17366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.071609][T17366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.080677][T17366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.089630][T17366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.149101][T17720] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.161910][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.169421][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.189254][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.197034][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.595046][T12488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.660758][T12488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.702175][T17486] veth0_vlan: entered promiscuous mode [ 180.723563][T17486] veth1_vlan: entered promiscuous mode [ 180.735109][T12488] bond0: (slave netdevsim1): Releasing backup interface [ 180.745717][T12488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.783158][T17720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.810881][T12488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.835043][T17486] veth0_macvtap: entered promiscuous mode [ 180.903309][T17486] veth1_macvtap: entered promiscuous mode [ 180.971565][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.983010][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.993322][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.004802][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.015919][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.027804][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.038392][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.049886][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.068422][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.077655][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.088588][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.098651][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.109932][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.119941][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.130812][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.141090][T17486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.152115][T17486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.166547][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.192703][T17486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.201956][T17486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.211794][T17486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.220811][T17486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.282521][T12488] bridge_slave_1: left allmulticast mode [ 181.289276][T12488] bridge_slave_1: left promiscuous mode [ 181.295138][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.305781][T12488] bridge_slave_0: left allmulticast mode [ 181.311522][T12488] bridge_slave_0: left promiscuous mode [ 181.317238][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.342915][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 181.342930][ T29] audit: type=1400 audit(1720042733.032:4575): avc: denied { create } for pid=18764 comm="syz.1.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.473705][ T29] audit: type=1400 audit(1720042733.162:4576): avc: denied { mount } for pid=18766 comm="syz.3.2580" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 181.516258][ T29] audit: type=1400 audit(1720042733.192:4577): avc: denied { unmount } for pid=17366 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 181.590331][T12488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.606694][T12488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.618065][T12488] bond0 (unregistering): Released all slaves [ 181.652075][T17720] veth0_vlan: entered promiscuous mode [ 181.683963][T18621] chnl_net:caif_netlink_parms(): no params data found [ 181.701205][ T29] audit: type=1400 audit(1720042733.382:4578): avc: denied { tracepoint } for pid=18775 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.760646][T17720] veth1_vlan: entered promiscuous mode [ 181.785405][T12488] hsr_slave_0: left promiscuous mode [ 181.801689][T12488] hsr_slave_1: left promiscuous mode [ 181.809608][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.817195][T12488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.829497][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.837081][T12488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.861175][ T29] audit: type=1400 audit(1720042733.542:4579): avc: denied { setopt } for pid=18802 comm="syz.2.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.886312][T12488] veth1_macvtap: left promiscuous mode [ 181.892063][T12488] veth0_macvtap: left promiscuous mode [ 181.897650][T12488] veth1_vlan: left promiscuous mode [ 181.902930][T12488] veth0_vlan: left promiscuous mode [ 182.066460][T12488] team0 (unregistering): Port device team_slave_1 removed [ 182.066629][ T29] audit: type=1400 audit(1720042733.752:4580): avc: denied { bind } for pid=18802 comm="syz.2.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.093331][ T29] audit: type=1400 audit(1720042733.752:4581): avc: denied { name_bind } for pid=18802 comm="syz.2.2531" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 182.123057][ T29] audit: type=1400 audit(1720042733.752:4582): avc: denied { node_bind } for pid=18802 comm="syz.2.2531" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 182.149464][ T29] audit: type=1400 audit(1720042733.762:4583): avc: denied { connect } for pid=18802 comm="syz.2.2531" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.156432][T12488] team0 (unregistering): Port device team_slave_0 removed [ 182.171598][ T29] audit: type=1400 audit(1720042733.762:4584): avc: denied { name_connect } for pid=18802 comm="syz.2.2531" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 182.321657][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.328850][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.340183][T18621] bridge_slave_0: entered allmulticast mode [ 182.347146][T18621] bridge_slave_0: entered promiscuous mode [ 182.361819][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.369080][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.376686][T18621] bridge_slave_1: entered allmulticast mode [ 182.383203][T18621] bridge_slave_1: entered promiscuous mode [ 182.403763][T18868] syz.3.2587[18868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.403880][T18868] syz.3.2587[18868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.460904][T17720] veth0_macvtap: entered promiscuous mode [ 182.487185][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.509909][T17720] veth1_macvtap: entered promiscuous mode [ 182.534454][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.554196][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.565286][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.575226][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.586069][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.596084][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.607159][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.617446][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.628001][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.640820][T17720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.662973][T18886] }p: renamed from pim6reg1 [ 182.704600][T18621] team0: Port device team_slave_0 added [ 182.712096][T18621] team0: Port device team_slave_1 added [ 182.745152][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.755805][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.765973][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.776776][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.787012][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.797684][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.808203][T17720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.818824][T17720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.836625][T17720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.862537][T17720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.872294][T17720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.882925][T17720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.895145][T17720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.930382][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.944707][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.971522][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.984943][T18945] syz.3.2591[18945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.985018][T18945] syz.3.2591[18945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.010218][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.029181][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.056393][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.080706][T18945] wg2: entered promiscuous mode [ 183.085777][T18945] wg2: entered allmulticast mode [ 183.156702][T18621] hsr_slave_0: entered promiscuous mode [ 183.165596][T18621] hsr_slave_1: entered promiscuous mode [ 183.188465][T18621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.198715][T18621] Cannot create hsr debugfs directory [ 183.230664][T18994] pim6reg1: entered promiscuous mode [ 183.236347][T18994] pim6reg1: entered allmulticast mode [ 183.509058][T19101] raw_sendmsg: syz.2.2612 forgot to set AF_INET. Fix it! [ 183.555978][T19122] team0: Cannot enslave team device to itself [ 183.559452][T19126] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 183.611883][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 183.653887][T18621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.672080][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 183.672299][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 183.690261][T18621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.704772][T18621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.705034][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 183.730345][T18621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.851501][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.878513][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.900861][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'. [ 183.915597][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.922794][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.941870][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.949002][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.978998][T19175] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 184.057352][T18621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.077316][T19178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2622'. [ 184.086615][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 184.095587][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 184.158006][T19196] loop2: detected capacity change from 0 to 128 [ 184.196441][T19201] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 184.204898][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.230150][T19205] loop1: detected capacity change from 0 to 512 [ 184.274532][T19205] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2635: corrupted in-inode xattr: invalid ea_ino [ 184.313918][T19205] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2635: couldn't read orphan inode 15 (err -117) [ 184.507762][T19248] No such timeout policy "syz0" [ 185.435643][T18621] veth0_vlan: entered promiscuous mode [ 185.571758][T19284] loop1: detected capacity change from 0 to 512 [ 185.584719][T19284] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.2652: casefold flag without casefold feature [ 185.598943][T19284] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2652: couldn't read orphan inode 15 (err -117) [ 185.691248][T19284] loop1: detected capacity change from 512 to 511 [ 185.702172][T19288] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #18: comm syz.1.2652: corrupted in-inode xattr: bad magic number in in-inode xattr [ 185.728058][T13042] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 36: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 185.758204][T12488] bio_check_eod: 142 callbacks suppressed [ 185.758235][T12488] kworker/u8:8: attempt to access beyond end of device [ 185.758235][T12488] loop1: rw=1, sector=510, nr_sectors = 2 limit=511 [ 185.778900][T12488] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 185.790756][T12488] Buffer I/O error on device loop1, logical block 255 [ 186.097134][T18621] veth1_vlan: entered promiscuous mode [ 186.327997][T19317] loop3: detected capacity change from 0 to 256 [ 186.345195][T19317] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 186.396792][T18621] veth0_macvtap: entered promiscuous mode [ 186.479061][ T336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.505099][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 186.505118][ T29] audit: type=1400 audit(1720042738.192:4607): avc: denied { write } for pid=19331 comm="syz.2.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.566289][T18621] veth1_macvtap: entered promiscuous mode [ 186.594964][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.606444][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.620502][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.632233][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.643236][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.653969][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.664700][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.676127][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.686516][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.698545][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.714621][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.725971][ T336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.742905][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.754360][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.764963][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.776928][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.787058][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.798263][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.809009][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.819728][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.830153][T18621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.840973][T18621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.855564][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.884640][ T336] bond0: (slave netdevsim1): Releasing backup interface [ 186.900596][ T336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.927509][ T29] audit: type=1400 audit(1720042738.612:4608): avc: denied { append } for pid=19347 comm="syz.2.2672" name="001" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.966445][T18621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.975733][T18621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.984769][T18621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.993902][T18621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.018812][ T29] audit: type=1400 audit(1720042738.702:4609): avc: denied { name_bind } for pid=19350 comm="syz.2.2673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 187.041757][ T29] audit: type=1400 audit(1720042738.702:4610): avc: denied { node_bind } for pid=19350 comm="syz.2.2673" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 187.104045][ T336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.398614][ T336] bridge_slave_1: left allmulticast mode [ 187.404404][ T336] bridge_slave_1: left promiscuous mode [ 187.410257][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.464147][ T336] bridge_slave_0: left allmulticast mode [ 187.471634][ T336] bridge_slave_0: left promiscuous mode [ 187.479309][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.501257][T19392] 9pnet_fd: Insufficient options for proto=fd [ 187.597234][ T29] audit: type=1400 audit(1720042739.282:4611): avc: denied { read } for pid=19400 comm="syz.3.2681" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.643728][ T29] audit: type=1400 audit(1720042739.282:4612): avc: denied { open } for pid=19400 comm="syz.3.2681" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.669664][ T29] audit: type=1400 audit(1720042739.282:4613): avc: denied { ioctl } for pid=19400 comm="syz.3.2681" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.746584][ T336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.768940][ T336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.790198][ T336] bond0 (unregistering): Released all slaves [ 187.807243][ T336] bond1 (unregistering): Released all slaves [ 187.878046][ T336] tipc: Left network mode [ 187.977730][ T336] hsr_slave_0: left promiscuous mode [ 187.991673][ T336] hsr_slave_1: left promiscuous mode [ 188.018302][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.027181][ T336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.037423][ T336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.046165][ T336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.071309][ T336] veth1_macvtap: left promiscuous mode [ 188.076913][ T336] veth0_macvtap: left promiscuous mode [ 188.082645][ T336] veth1_vlan: left promiscuous mode [ 188.088077][ T336] veth0_vlan: left promiscuous mode [ 188.263950][T19504] loop3: detected capacity change from 0 to 1024 [ 188.282025][T19504] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 188.292036][T19504] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 188.302172][ T336] team0 (unregistering): Port device team_slave_1 removed [ 188.320100][ T336] team0 (unregistering): Port device team_slave_0 removed [ 188.323113][T19504] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 188.367128][T19504] EXT4-fs error (device loop3): ext4_get_journal_inode:5752: inode #5: comm syz.3.2686: casefold flag without casefold feature [ 188.398026][T19504] EXT4-fs (loop3): no journal found [ 188.444994][T19319] chnl_net:caif_netlink_parms(): no params data found [ 188.650766][T19319] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.658174][T19319] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.666194][T19319] bridge_slave_0: entered allmulticast mode [ 188.677755][T19319] bridge_slave_0: entered promiscuous mode [ 188.685786][T19319] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.693402][T19319] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.704293][T19319] bridge_slave_1: entered allmulticast mode [ 188.712780][T19319] bridge_slave_1: entered promiscuous mode [ 188.747643][T19319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.758455][T19595] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2695'. [ 188.773063][ T29] audit: type=1400 audit(1720042740.462:4614): avc: denied { checkpoint_restore } for pid=19527 comm="syz.3.2693" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.774967][T19595] gretap0: entered promiscuous mode [ 188.843717][T19319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.862187][T19608] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2695'. [ 188.876507][T19608] 0猉功D: renamed from gretap0 [ 188.883715][T19608] 0猉功D: left promiscuous mode [ 188.888638][T19608] 0猉功D: entered allmulticast mode [ 188.897654][T19608] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 188.937519][ T29] audit: type=1326 audit(1720042740.622:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19591 comm="syz.2.2695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3cbbb5bd9 code=0x0 [ 188.938615][T19319] team0: Port device team_slave_0 added [ 188.970355][T19319] team0: Port device team_slave_1 added [ 188.982470][T19634] loop4: detected capacity change from 0 to 2048 [ 189.007409][T19319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.015013][T19319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.018037][T19660] loop2: detected capacity change from 0 to 512 [ 189.041656][T19319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.059236][T19634] loop4: p1 < > p4 [ 189.059994][T19319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.066840][T19634] loop4: p4 size 8388608 extends beyond EOD, [ 189.070243][T19319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.070280][T19319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.076649][T19634] truncated [ 189.123849][T19660] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.149426][T19319] hsr_slave_0: entered promiscuous mode [ 189.156671][T19319] hsr_slave_1: entered promiscuous mode [ 189.164339][T19319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.173739][T19319] Cannot create hsr debugfs directory [ 189.179528][T19634] loop4: detected capacity change from 0 to 512 [ 189.210351][ T29] audit: type=1400 audit(1720042740.892:4616): avc: denied { remove_name } for pid=17486 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.211033][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.250391][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.268039][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.285266][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.299006][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.314294][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.328002][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.343908][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.358891][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.374587][T17486] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 189.469793][T19790] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2706'. [ 189.488566][T19790] gretap0: entered promiscuous mode [ 189.513252][T19790] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2706'. [ 189.531338][T19790] 0猉功D: renamed from gretap0 [ 189.541017][T19790] 0猉功D: left promiscuous mode [ 189.546155][T19790] 0猉功D: entered allmulticast mode [ 189.555639][T19790] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 189.594772][T19798] loop3: detected capacity change from 0 to 2048 [ 189.605586][T19319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.624428][T19319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.643840][T19319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.659050][T19319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.675592][T19798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 189.695788][T19798] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 1034 with max blocks 1 with error 28 [ 189.709601][T19798] EXT4-fs (loop3): This should not happen!! Data will be lost [ 189.709601][T19798] [ 189.720067][T19798] EXT4-fs (loop3): Total free blocks count 0 [ 189.726996][T19798] EXT4-fs (loop3): Free/Dirty block details [ 189.733587][T19798] EXT4-fs (loop3): free_blocks=2415919104 [ 189.739413][T19798] EXT4-fs (loop3): dirty_blocks=16 [ 189.745209][T19798] EXT4-fs (loop3): Block reservation details [ 189.751909][T19798] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 189.773870][T12488] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.849384][T12488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.864335][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 189.878394][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 189.878394][ T11] [ 189.899602][T19319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.918253][T19319] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.929686][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.937112][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.960386][T12488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.975511][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.983029][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.996267][T19832] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 190.013090][T19832] team0: Port device netdevsim1 added [ 190.019949][T19834] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 190.033533][T19834] team0: Port device netdevsim1 removed [ 190.042369][T19834] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 190.080019][T19836] loop3: detected capacity change from 0 to 2048 [ 190.083420][T19319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.096990][T19319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.113882][T12488] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.121851][T19836] loop3: p1 < > p4 [ 190.129561][T19836] loop3: p4 size 8388608 extends beyond EOD, truncated [ 190.189953][T19836] loop3: detected capacity change from 0 to 512 [ 190.226230][T12488] bridge_slave_1: left allmulticast mode [ 190.232410][T12488] bridge_slave_1: left promiscuous mode [ 190.238282][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.246678][T12488] bridge_slave_0: left allmulticast mode [ 190.253009][T12488] bridge_slave_0: left promiscuous mode [ 190.259129][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.374487][T12488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.387664][T12488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.400595][T12488] bond0 (unregistering): Released all slaves [ 190.423321][T19319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.452203][T19970] loop3: detected capacity change from 0 to 128 [ 190.453561][T19820] chnl_net:caif_netlink_parms(): no params data found [ 190.515643][T12488] hsr_slave_0: left promiscuous mode [ 190.532925][T12488] hsr_slave_1: left promiscuous mode [ 190.540442][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.549234][T12488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.576804][T12488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.585723][T12488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.605446][T20011] loop3: detected capacity change from 0 to 2048 [ 190.617727][T12488] veth1_macvtap: left promiscuous mode [ 190.624215][T12488] veth0_macvtap: left promiscuous mode [ 190.630008][T12488] veth1_vlan: left promiscuous mode [ 190.635734][T12488] veth0_vlan: left promiscuous mode [ 190.662249][T20011] loop3: p1 < > p4 [ 190.666954][T20011] loop3: p4 size 8388608 extends beyond EOD, truncated [ 190.716753][T20011] loop3: detected capacity change from 0 to 512 [ 190.730302][T20023] loop4: detected capacity change from 0 to 256 [ 190.744700][T20023] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.880203][T12488] team0 (unregistering): Port device team_slave_1 removed [ 190.898319][T12488] team0 (unregistering): Port device team_slave_0 removed [ 191.083143][T19820] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.090723][T19820] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.098578][T19820] bridge_slave_0: entered allmulticast mode [ 191.105199][T19820] bridge_slave_0: entered promiscuous mode [ 191.112227][T19820] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.119416][T19820] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.127973][T19820] bridge_slave_1: entered allmulticast mode [ 191.134915][T19820] bridge_slave_1: entered promiscuous mode [ 191.184658][T20074] loop0: detected capacity change from 0 to 2048 [ 191.195478][T19820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.207069][T19820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.230343][T19319] veth0_vlan: entered promiscuous mode [ 191.239119][T19820] team0: Port device team_slave_0 added [ 191.246422][T19820] team0: Port device team_slave_1 added [ 191.252734][T20074] loop0: p1 < > p4 [ 191.254951][T19319] veth1_vlan: entered promiscuous mode [ 191.263082][T20074] loop0: p4 size 8388608 extends beyond EOD, truncated [ 191.280182][T19820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.292774][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.320082][T19820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.336097][T19820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.344458][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.371861][T19820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.388418][T20074] loop0: detected capacity change from 0 to 512 [ 191.411983][T19820] hsr_slave_0: entered promiscuous mode [ 191.418658][T19820] hsr_slave_1: entered promiscuous mode [ 191.424986][T19820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.433559][T19820] Cannot create hsr debugfs directory [ 191.456824][T19319] veth0_macvtap: entered promiscuous mode [ 191.478776][T19319] veth1_macvtap: entered promiscuous mode [ 191.543979][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.555156][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.566065][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.576683][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.587454][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.598250][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.601840][T20221] loop4: detected capacity change from 0 to 2048 [ 191.608156][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.626995][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.641022][T19319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.649421][T20220] netlink: 'syz.0.2729': attribute type 10 has an invalid length. [ 191.664041][T20220] team0: Port device netdevsim1 added [ 191.673458][T20221] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.702747][T20222] netlink: 'syz.0.2729': attribute type 10 has an invalid length. [ 191.718486][T20221] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 1034 with max blocks 1 with error 28 [ 191.731221][T20221] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.731221][T20221] [ 191.741876][T20221] EXT4-fs (loop4): Total free blocks count 0 [ 191.748049][T20221] EXT4-fs (loop4): Free/Dirty block details [ 191.754400][T20221] EXT4-fs (loop4): free_blocks=2415919104 [ 191.760237][T20221] EXT4-fs (loop4): dirty_blocks=16 [ 191.765475][T20221] EXT4-fs (loop4): Block reservation details [ 191.771765][T20221] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 191.782388][T20222] team0: Port device netdevsim1 removed [ 191.799161][T20222] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 191.822030][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.832783][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.842878][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.853803][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.863660][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.874132][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.884066][T19319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.894881][T19319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.909882][T19319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.927506][T19319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.937219][T19319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.947434][T19319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.957390][T19319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.980225][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 191.992742][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.992742][ T11] [ 192.066778][T20263] loop0: detected capacity change from 0 to 2048 [ 192.080146][T20274] syz.1.2662[20274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.080214][T20274] syz.1.2662[20274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.104699][T20276] loop4: detected capacity change from 0 to 2048 [ 192.133652][T20263] loop0: p1 < > p4 [ 192.140029][T20263] loop0: p4 size 8388608 extends beyond EOD, truncated [ 192.146604][T20280] loop1: detected capacity change from 0 to 2048 [ 192.156091][T20276] loop4: p1 < > p4 [ 192.160477][T20276] loop4: p4 size 8388608 extends beyond EOD, truncated [ 192.181814][T20280] loop1: p1 < > p4 [ 192.186957][T20280] loop1: p4 size 8388608 extends beyond EOD, truncated [ 192.189135][T20263] loop0: detected capacity change from 0 to 512 [ 192.225613][T20276] loop4: detected capacity change from 0 to 512 [ 192.247902][T20280] loop1: detected capacity change from 0 to 512 [ 192.252335][T19820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.264000][T19820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.275106][T19820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.286055][T19820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.343929][T19820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.362710][T19820] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.384750][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.393362][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.403199][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.410864][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.435110][T19820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.446957][T19820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.484069][T20339] loop1: detected capacity change from 0 to 2048 [ 192.508232][T20339] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 192.542805][T20339] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 1034 with max blocks 1 with error 28 [ 192.556866][T20339] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.556866][T20339] [ 192.566851][T20339] EXT4-fs (loop1): Total free blocks count 0 [ 192.573101][T20339] EXT4-fs (loop1): Free/Dirty block details [ 192.579558][T20339] EXT4-fs (loop1): free_blocks=2415919104 [ 192.585433][T20339] EXT4-fs (loop1): dirty_blocks=16 [ 192.591490][T20339] EXT4-fs (loop1): Block reservation details [ 192.598381][T20339] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 192.621586][T19820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.655135][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 192.669093][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.669093][ T11] [ 192.721703][T19820] veth0_vlan: entered promiscuous mode [ 192.740080][T19820] veth1_vlan: entered promiscuous mode [ 192.751008][T20366] loop1: detected capacity change from 0 to 512 [ 192.762105][T19820] veth0_macvtap: entered promiscuous mode [ 192.770335][T19820] veth1_macvtap: entered promiscuous mode [ 192.785027][T20366] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.799515][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.811060][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.821159][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.831678][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.842879][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.853623][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.864031][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.875625][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.886349][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.897472][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.910764][T19820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.927967][T20377] loop0: detected capacity change from 0 to 736 [ 192.938426][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.942314][T20381] loop3: detected capacity change from 0 to 2048 [ 192.949556][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.967456][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.978172][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.989042][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.994754][T20377] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 192.999995][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.010580][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 193.010606][ T29] audit: type=1400 audit(1720042744.702:4623): avc: denied { create } for pid=20376 comm="syz.0.2748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 193.018344][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.056005][T20377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.060298][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.070805][ T29] audit: type=1400 audit(1720042744.742:4624): avc: denied { create } for pid=20376 comm="syz.0.2748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 193.080007][T19820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.108083][T20379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.116542][T19820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.128427][T20377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.146265][T20366] loop1: detected capacity change from 512 to 0 [ 193.151843][T20381] loop3: p1 < > p4 [ 193.153935][T19820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.166345][T19820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.176207][T19820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.186994][T19820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.197646][T19820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.216022][T20377] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 193.223444][T20377] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.231772][T20377] vhci_hcd vhci_hcd.0: Device attached [ 193.242185][T20379] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 193.249582][T19319] syz-executor: attempt to access beyond end of device [ 193.249582][T19319] loop1: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 193.249771][T20379] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.264169][T19319] syz-executor: attempt to access beyond end of device [ 193.264169][T19319] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 193.272597][T20379] vhci_hcd vhci_hcd.0: Device attached [ 193.287328][T19319] syz-executor: attempt to access beyond end of device [ 193.287328][T19319] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 193.295939][ T29] audit: type=1400 audit(1720042744.922:4625): avc: denied { read } for pid=20384 comm="vhci_rx" scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 193.308467][T20381] loop3: p4 size 8388608 extends beyond EOD, truncated [ 193.332687][T19319] syz-executor: attempt to access beyond end of device [ 193.332687][T19319] loop1: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 193.340758][T20377] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 193.352957][T19319] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 193.360201][T20377] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.360413][T20377] vhci_hcd vhci_hcd.0: Device attached [ 193.375647][T19319] syz-executor: attempt to access beyond end of device [ 193.375647][T19319] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 193.407023][T19319] buffer_io_error: 50 callbacks suppressed [ 193.407113][T19319] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.419860][T20394] vhci_hcd: connection closed [ 193.425419][T19319] EXT4-fs (loop1): I/O error while writing superblock [ 193.431871][ T11] vhci_hcd: stop threads [ 193.438185][T19319] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 193.443030][ T11] vhci_hcd: release socket [ 193.454242][T20387] vhci_hcd: connection closed [ 193.458417][ T11] vhci_hcd: disconnect device [ 193.458538][T20384] vhci_hcd: connection closed [ 193.471293][ T3171] vhci_hcd: vhci_device speed not set [ 193.487370][T19319] syz-executor: attempt to access beyond end of device [ 193.487370][T19319] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 193.490481][ T11] vhci_hcd: stop threads [ 193.503364][T19319] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.515476][T19319] EXT4-fs (loop1): I/O error while writing superblock [ 193.519679][ T11] vhci_hcd: release socket [ 193.527342][T19319] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 193.532434][ T11] vhci_hcd: disconnect device [ 193.547872][T19319] syz-executor: attempt to access beyond end of device [ 193.547872][T19319] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 193.555242][ T3171] usb 1-4: new full-speed USB device number 2 using vhci_hcd [ 193.564612][T19319] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.579374][T20388] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 193.585654][ T29] audit: type=1400 audit(1720042745.262:4626): avc: denied { write } for pid=20388 comm="vhci_tx" scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 193.591476][T19319] EXT4-fs (loop1): I/O error while writing superblock [ 193.613308][ T11] vhci_hcd: stop threads [ 193.624876][ T11] vhci_hcd: release socket [ 193.629988][ T11] vhci_hcd: disconnect device [ 193.636426][ T28] kworker/u8:1: attempt to access beyond end of device [ 193.636426][ T28] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 193.650928][ T28] kworker/u8:1: attempt to access beyond end of device [ 193.650928][ T28] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 193.665272][ T28] kworker/u8:1: attempt to access beyond end of device [ 193.665272][ T28] loop1: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 193.679742][ T28] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #4: block 34: comm kworker/u8:1: unable to read itable block [ 193.695212][ T28] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.705786][ T28] EXT4-fs (loop1): I/O error while writing superblock [ 193.715814][T20408] program syz.3.2752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.718477][ T28] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:1: unable to read itable block [ 193.739343][ T28] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.747688][ T28] EXT4-fs (loop1): I/O error while writing superblock [ 193.754642][ T28] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:1: unable to read itable block [ 193.770350][ T28] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.774726][T20410] loop2: detected capacity change from 0 to 256 [ 193.780857][ T28] EXT4-fs (loop1): I/O error while writing superblock [ 193.787861][T20412] netlink: 'syz.3.2754': attribute type 10 has an invalid length. [ 193.803282][T19319] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 193.812246][T20410] FAT-fs (loop2): Directory bread(block 64) failed [ 193.813033][T19319] EXT4-fs (loop1): I/O error while writing superblock [ 193.819552][T20410] FAT-fs (loop2): Directory bread(block 65) failed [ 193.835628][T20410] FAT-fs (loop2): Directory bread(block 66) failed [ 193.838005][T20370] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 193.842852][T20410] FAT-fs (loop2): Directory bread(block 67) failed [ 193.857424][T20410] FAT-fs (loop2): Directory bread(block 68) failed [ 193.857756][T20412] bond0: (slave netdevsim1): Releasing backup interface [ 193.864718][T20410] FAT-fs (loop2): Directory bread(block 69) failed [ 193.879121][T20410] FAT-fs (loop2): Directory bread(block 70) failed [ 193.880998][T20412] team0: Port device netdevsim1 added [ 193.885769][T20410] FAT-fs (loop2): Directory bread(block 71) failed [ 193.885814][T20410] FAT-fs (loop2): Directory bread(block 72) failed [ 193.897611][T20413] netlink: 'syz.3.2754': attribute type 10 has an invalid length. [ 193.902258][T20410] FAT-fs (loop2): Directory bread(block 73) failed [ 193.926039][T20413] team0: Port device netdevsim1 removed [ 193.935256][T20413] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 193.981092][T19820] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 193.990417][T19820] FAT-fs (loop2): Filesystem has been set read-only [ 194.074397][T20429] netlink: 'syz.4.2760': attribute type 10 has an invalid length. [ 194.092396][T20429] team0: Port device netdevsim1 added [ 194.103636][T20431] loop3: detected capacity change from 0 to 2048 [ 194.111345][T20429] netlink: 'syz.4.2760': attribute type 10 has an invalid length. [ 194.130521][T20429] team0: Port device netdevsim1 removed [ 194.139053][T20429] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 194.141959][T20431] loop3: p1 < > p4 [ 194.154076][T20431] loop3: p4 size 8388608 extends beyond EOD, truncated [ 194.180266][T20442] syz.4.2764[20442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.180318][T20442] syz.4.2764[20442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.194552][T20442] loop4: detected capacity change from 0 to 128 [ 194.218090][T20442] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.220250][T20431] loop3: detected capacity change from 0 to 512 [ 194.239893][ T29] audit: type=1400 audit(1720042745.922:4627): avc: denied { setattr } for pid=20441 comm="syz.4.2764" path="/21/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.266304][ T29] audit: type=1400 audit(1720042745.922:4628): avc: denied { mounton } for pid=20441 comm="syz.4.2764" path="/21/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.334396][T20453] netlink: 'syz.3.2765': attribute type 10 has an invalid length. [ 194.346262][T20453] bond0: (slave netdevsim1): Releasing backup interface [ 194.355945][T20453] team0: Port device netdevsim1 added [ 194.363681][T20453] netlink: 'syz.3.2765': attribute type 10 has an invalid length. [ 194.381256][T20453] team0: Port device netdevsim1 removed [ 194.389458][T20453] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 194.509766][T20466] loop3: detected capacity change from 0 to 736 [ 194.527485][T20466] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 194.552741][T20466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.563101][T20466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.571914][T20466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.580947][T20466] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 194.587706][T20466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.595645][T20466] vhci_hcd vhci_hcd.0: Device attached [ 194.602428][T20466] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 194.609144][T20466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.616729][T20466] vhci_hcd vhci_hcd.0: Device attached [ 194.623112][T20466] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 194.630136][T20466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 194.638892][T20466] vhci_hcd vhci_hcd.0: Device attached [ 194.644668][T20473] vhci_hcd: connection closed [ 194.644823][T20469] vhci_hcd: connection closed [ 194.645004][T20471] vhci_hcd: connection closed [ 194.649974][ T28] vhci_hcd: stop threads [ 194.663733][ T28] vhci_hcd: release socket [ 194.668214][ T28] vhci_hcd: disconnect device [ 194.674438][ T28] vhci_hcd: stop threads [ 194.678695][ T28] vhci_hcd: release socket [ 194.683221][ T28] vhci_hcd: disconnect device [ 194.688123][ T28] vhci_hcd: stop threads [ 194.692584][ T28] vhci_hcd: release socket [ 194.697400][ T28] vhci_hcd: disconnect device [ 194.980948][T20476] loop0: detected capacity change from 0 to 8192 [ 195.020881][T18621] EXT4-fs unmount: 19 callbacks suppressed [ 195.020896][T18621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.069586][ T29] audit: type=1400 audit(1720042746.752:4629): avc: denied { name_bind } for pid=20479 comm="syz.4.2774" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 195.098246][T20485] netlink: 'syz.0.2773': attribute type 10 has an invalid length. [ 195.113892][T20485] bond0: (slave netdevsim1): Releasing backup interface [ 195.123623][T20485] team0: Port device netdevsim1 added [ 195.132938][T20485] netlink: 'syz.0.2773': attribute type 10 has an invalid length. [ 195.152461][T20485] team0: Port device netdevsim1 removed [ 195.161443][T20485] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 195.163335][T20489] loop4: detected capacity change from 0 to 2048 [ 195.210879][T20495] tmpfs: Unsupported parameter 'huge' [ 195.217270][T20489] loop4: p1 < > p4 [ 195.223727][T20499] netlink: 'syz.3.2777': attribute type 10 has an invalid length. [ 195.232006][ T29] audit: type=1400 audit(1720042746.912:4630): avc: denied { getopt } for pid=20494 comm="syz.0.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.234016][T20489] loop4: p4 size 8388608 extends beyond EOD, truncated [ 195.256957][T20495] loop0: detected capacity change from 0 to 256 [ 195.275566][T20499] bond0: (slave netdevsim1): Releasing backup interface [ 195.285685][T20499] team0: Port device netdevsim1 added [ 195.291896][T20495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2779'. [ 195.310198][T20489] loop4: detected capacity change from 0 to 512 [ 195.310744][T20503] netlink: 'syz.3.2777': attribute type 10 has an invalid length. [ 195.341470][T20503] team0: Port device netdevsim1 removed [ 195.349780][T20503] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 195.442615][T20520] loop4: detected capacity change from 0 to 8192 [ 195.526811][T20532] netlink: 'syz.4.2786': attribute type 10 has an invalid length. [ 195.537780][T20532] bond0: (slave netdevsim1): Releasing backup interface [ 195.546782][T20532] team0: Port device netdevsim1 added [ 195.554529][T20532] netlink: 'syz.4.2786': attribute type 10 has an invalid length. [ 195.567214][T20532] team0: Port device netdevsim1 removed [ 195.575748][T20532] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 195.601325][T20535] loop4: detected capacity change from 0 to 736 [ 195.616340][T20535] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 195.623576][T20537] netlink: 'syz.0.2788': attribute type 10 has an invalid length. [ 195.643992][T20537] bond0: (slave netdevsim1): Releasing backup interface [ 195.645331][T20535] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.660335][T20535] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.661455][T20537] team0: Port device netdevsim1 added [ 195.668864][T20535] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.676987][T20540] netlink: 'syz.0.2788': attribute type 10 has an invalid length. [ 195.683457][T20535] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 195.696750][T20535] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.704287][T20535] vhci_hcd vhci_hcd.0: Device attached [ 195.713574][T20535] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 195.720380][T20535] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.727847][T20535] vhci_hcd vhci_hcd.0: Device attached [ 195.734112][T20540] team0: Port device netdevsim1 removed [ 195.737299][T20535] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19) [ 195.742511][T20540] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 195.746798][T20535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.764461][T20535] vhci_hcd vhci_hcd.0: Device attached [ 195.771960][T20545] vhci_hcd: connection closed [ 195.772089][T20543] vhci_hcd: connection closed [ 195.776518][ T36] vhci_hcd: stop threads [ 195.776855][T20541] vhci_hcd: connection closed [ 195.781698][ T36] vhci_hcd: release socket [ 195.781710][ T36] vhci_hcd: disconnect device [ 195.800877][ T36] vhci_hcd: stop threads [ 195.805273][ T36] vhci_hcd: release socket [ 195.809804][ T36] vhci_hcd: disconnect device [ 195.816562][ T36] vhci_hcd: stop threads [ 195.820993][ T36] vhci_hcd: release socket [ 195.825509][ T36] vhci_hcd: disconnect device [ 195.830230][ T29] audit: type=1400 audit(1720042747.512:4631): avc: denied { create } for pid=20549 comm="syz.0.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.830479][T20550] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 195.851805][ T29] audit: type=1400 audit(1720042747.512:4632): avc: denied { setopt } for pid=20549 comm="syz.0.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.890842][T20552] netlink: 'syz.0.2791': attribute type 10 has an invalid length. [ 195.901370][T20552] bond0: (slave netdevsim1): Releasing backup interface [ 195.911862][T20552] team0: Port device netdevsim1 added [ 195.919139][T20552] netlink: 'syz.0.2791': attribute type 10 has an invalid length. [ 195.931007][T20552] team0: Port device netdevsim1 removed [ 195.939212][T20552] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 196.065475][T20563] loop0: detected capacity change from 0 to 8192 [ 196.198277][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.232805][T20575] bond0: (slave netdevsim1): Releasing backup interface [ 196.247094][T20575] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 196.257390][T20575] team0: Failed to send options change via netlink (err -105) [ 196.265135][T20575] team0: Port device netdevsim1 added [ 196.282749][T20580] bond0: (slave netdevsim1): Releasing backup interface [ 196.287593][T20584] tmpfs: Bad value for 'mpol' [ 196.296927][T20580] team0: Port device netdevsim1 added [ 196.306574][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.343286][T20585] team0: Port device netdevsim1 removed [ 196.357244][T20585] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 196.383278][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.395890][T20596] loop4: detected capacity change from 0 to 1024 [ 196.418298][T20591] loop0: detected capacity change from 0 to 8192 [ 196.431528][T20596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.487212][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.511417][T20596] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz.4.2808: Abort forced by user [ 196.522099][T20596] EXT4-fs (loop4): Remounting filesystem read-only [ 196.568225][T20577] chnl_net:caif_netlink_parms(): no params data found [ 196.578970][T20715] loop0: detected capacity change from 0 to 2048 [ 196.584796][T20714] loop3: detected capacity change from 0 to 512 [ 196.611654][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.623952][T20715] loop0: p1 < > p4 [ 196.631372][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.634173][T20715] loop0: p4 size 8388608 extends beyond EOD, truncated [ 196.645238][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.657884][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.669600][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.669725][ T28] ================================================================== [ 196.681839][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.688261][ T28] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 196.704056][ T28] [ 196.706405][ T28] write to 0xffffffff8606a438 of 8 bytes by task 20735 on cpu 1: [ 196.714957][ T28] data_alloc+0x291/0x2c0 [ 196.719325][ T28] prb_reserve+0x85e/0xb60 [ 196.723783][ T28] vprintk_store+0x53f/0x810 [ 196.728571][ T28] vprintk_emit+0x10c/0x5e0 [ 196.733274][ T28] vprintk_default+0x26/0x30 [ 196.737893][ T28] vprintk+0x75/0x80 [ 196.741840][ T28] _printk+0x7a/0xa0 [ 196.745771][ T28] inode_doinit_use_xattr+0x2aa/0x2b0 [ 196.751177][ T28] inode_doinit_with_dentry+0x5dc/0x840 [ 196.756332][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.757117][ T28] may_create+0x125/0x2f0 [ 196.757141][ T28] selinux_inode_create+0x22/0x30 [ 196.757171][ T28] security_inode_create+0x79/0xb0 [ 196.776461][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.780999][ T28] path_openat+0xec5/0x1fa0 [ 196.781025][ T28] do_filp_open+0xf7/0x200 [ 196.799376][ T28] do_sys_openat2+0xab/0x120 [ 196.803993][ T28] __x64_sys_openat+0xf3/0x120 [ 196.808858][ T28] x64_sys_call+0x1057/0x2d70 [ 196.810262][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.813536][ T28] do_syscall_64+0xc9/0x1c0 [ 196.813570][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.833599][ T28] [ 196.835985][ T28] read to 0xffffffff8606a438 of 8 bytes by task 28 on cpu 0: [ 196.841226][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.843376][ T28] prb_reserve+0x235/0xb60 [ 196.856962][ T28] vprintk_store+0x53f/0x810 [ 196.861922][ T28] vprintk_emit+0x10c/0x5e0 [ 196.867059][ T28] vprintk_default+0x26/0x30 [ 196.867392][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 196.872374][ T28] vprintk+0x75/0x80 [ 196.872406][ T28] _printk+0x7a/0xa0 [ 196.872439][ T28] __netdev_printk+0x2d1/0x3e0 [ 196.872459][ T28] netdev_info+0x99/0xc0 [ 196.882545][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 196.886172][ T28] __dev_set_allmulti+0x15b/0x240 [ 196.901220][T20735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 196.910748][ T28] dev_set_allmulti+0x1f/0x30 [ 196.910791][ T28] del_nbp+0x68/0x770 [ 196.939104][ T28] br_dev_delete+0x4e/0xe0 [ 196.944219][ T28] br_net_exit_batch_rtnl+0xca/0x170 [ 196.949798][ T28] cleanup_net+0x3df/0x830 [ 196.955461][ T28] process_scheduled_works+0x483/0x9a0 [ 196.961378][ T28] worker_thread+0x526/0x720 [ 196.966531][ T28] kthread+0x1d1/0x210 [ 196.970711][ T28] ret_from_fork+0x4b/0x60 [ 196.976083][ T28] ret_from_fork_asm+0x1a/0x30 [ 196.983416][ T28] [ 196.987007][ T28] value changed: 0xfffffffffffd4d18 -> 0x0000000000078b10 [ 196.994259][ T28] [ 196.996616][ T28] Reported by Kernel Concurrency Sanitizer on: [ 197.002953][ T28] CPU: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0 [ 197.015394][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.026638][ T28] Workqueue: netns cleanup_net [ 197.032768][ T28] ================================================================== [ 196.669597][ T28] bridge_slave_1: left allmulticast mode [ 197.046959][T20714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.049381][ T28] bridge_slave_1: left promiscuous mode [ 197.063658][T20714] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.068246][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.088331][ T28] bridge_slave_0: left allmulticast mode [ 197.095212][ T28] bridge_slave_0: left promiscuous mode [ 197.101297][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.117791][T20715] loop0: detected capacity change from 0 to 512 [ 197.165753][T17366] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.224334][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.236026][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.247622][ T28] bond0 (unregistering): Released all slaves [ 197.268092][T18621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.281736][T20577] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.288928][T20577] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.296680][T20577] bridge_slave_0: entered allmulticast mode [ 197.304373][T20577] bridge_slave_0: entered promiscuous mode [ 197.312704][T20577] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.319972][T20577] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.330866][T20577] bridge_slave_1: entered allmulticast mode [ 197.338139][T20577] bridge_slave_1: entered promiscuous mode [ 197.357304][T20577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.369218][T20577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.386028][ T28] hsr_slave_0: left promiscuous mode [ 197.393020][ T28] hsr_slave_1: left promiscuous mode [ 197.399065][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.406981][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.415311][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.422924][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.432468][ T28] veth1_macvtap: left promiscuous mode [ 197.438050][ T28] veth0_macvtap: left promiscuous mode [ 197.443773][ T28] veth1_vlan: left promiscuous mode [ 197.449271][ T28] veth0_vlan: left promiscuous mode [ 197.538968][ T28] team0 (unregistering): Port device team_slave_1 removed [ 197.549812][ T28] team0 (unregistering): Port device team_slave_0 removed [ 197.597895][T20577] team0: Port device team_slave_0 added [ 197.604933][T20577] team0: Port device team_slave_1 added [ 197.625546][T20577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.632834][T20577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.659939][T20577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.672307][T20577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.679666][T20577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.706036][T20577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.736301][T20577] hsr_slave_0: entered promiscuous mode [ 197.743713][T20577] hsr_slave_1: entered promiscuous mode [ 197.751013][T20577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.760361][T20577] Cannot create hsr debugfs directory [ 197.975996][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.153329][T20577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.163231][T20577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.172635][T20577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.181811][T20577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.222794][T20577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.241314][T20577] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.253633][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.261037][ T8106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.285127][T20577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.295851][T20577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.314437][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.322200][ T8106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.406946][T20577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.498257][T20577] veth0_vlan: entered promiscuous mode [ 198.507444][T20577] veth1_vlan: entered promiscuous mode [ 198.528482][T20577] veth0_macvtap: entered promiscuous mode [ 198.539283][T20577] veth1_macvtap: entered promiscuous mode [ 198.552637][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.563769][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.573864][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.584518][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.594533][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.605338][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.615236][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.625816][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.636192][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.646900][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.659456][T20577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.671654][ T3171] usb 1-4: enqueue for inactive port 3 [ 198.677289][ T3171] usb 1-4: enqueue for inactive port 3 [ 198.683121][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.694260][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.704457][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.716100][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.726156][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.736620][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.746583][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.757151][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.767145][T20577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.777826][T20577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.790456][T20577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.799390][T20577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.808379][T20577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.817160][T20577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.825889][T20577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.872541][ T3171] vhci_hcd: vhci_device speed not set [ 199.485885][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.545567][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.615000][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.691585][ T28] bridge_slave_1: left allmulticast mode [ 199.697985][ T28] bridge_slave_1: left promiscuous mode [ 199.703819][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.714202][ T28] bridge_slave_0: left allmulticast mode [ 199.719974][ T28] bridge_slave_0: left promiscuous mode [ 199.725786][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.844243][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.856561][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.866961][ T28] bond0 (unregistering): Released all slaves [ 199.974084][ T28] hsr_slave_0: left promiscuous mode [ 199.981236][ T28] hsr_slave_1: left promiscuous mode [ 199.988269][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.996642][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.006625][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.014284][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.025376][ T28] veth1_macvtap: left promiscuous mode [ 200.031034][ T28] veth0_macvtap: left promiscuous mode [ 200.036894][ T28] veth1_vlan: left promiscuous mode [ 200.042341][ T28] veth0_vlan: left promiscuous mode [ 200.153907][ T28] team0 (unregistering): Port device team_slave_1 removed [ 200.167543][ T28] team0 (unregistering): Port device team_slave_0 removed [ 203.728975][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 203.728994][ T29] audit: type=1400 audit(1720042755.412:4635): avc: denied { read } for pid=2765 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 203.759307][ T29] audit: type=1400 audit(1720042755.412:4636): avc: denied { search } for pid=2765 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.782620][ T29] audit: type=1400 audit(1720042755.412:4637): avc: denied { append } for pid=2765 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.805804][ T29] audit: type=1400 audit(1720042755.412:4638): avc: denied { open } for pid=2765 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.829241][ T29] audit: type=1400 audit(1720042755.412:4639): avc: denied { getattr } for pid=2765 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1