last executing test programs: 1.680493112s ago: executing program 3 (id=369): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000180)=ANY=[], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.646693495s ago: executing program 3 (id=370): r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601070000000000000000000000000500010007000000b7d526add4bb6dd7e9f5bceb6013d406d339eb6feb19d7ed389a8810a955fc78b018d4ad8550f0547b9afb2f1c4dc70ff77c1eb6ec2e2194cbab96a02f84e7b6e134511203"], 0x1c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000e849) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.210007111s ago: executing program 2 (id=386): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00008e1604c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400c0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.145849166s ago: executing program 2 (id=390): r0 = socket(0x2a, 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 1.145634296s ago: executing program 2 (id=391): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gre0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r3], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039042bbd700000000000000003e4", @ANYRES32=r3, @ANYBLOB="03000000000000002000128008000100736974001400028008000300ac1e010106000e0007000000aaad4310e8894d8483b860e3b7c8e04b5fee52c9bac1df41970929fcfdd8a32b92f849b898d7f35bfd5c85d3f43c60e34ba8222915fc1de43239bfafb9c2bddd2319ecedf3d4f36d253d649f278c348a20fdde2525e9e51a3b41d76e9684d933c78088a290a4b72cc13dd7099ecdc07c33961d01de3a1237b7fe2910d02128e2e551b6d52b31cf11fdfb8069c8f0fb708d5ba253ce5a8703b32c7903e8181a325f690711bbbbf7b04d6b5c2121339879866bda"], 0x40}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.054934684s ago: executing program 0 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x8, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5aa}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) mmap(&(0x7f0000002000/0x13000)=nil, 0x13000, 0x0, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) 941.314193ms ago: executing program 4 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x4) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x50, &(0x7f00000000c0)={[{@data_journal}, {@orlov}, {@dioread_nolock}, {@dax}, {@mblk_io_submit}, {@dioread_lock}, {@noblock_validity}, {@noblock_validity}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 939.275333ms ago: executing program 4 (id=397): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200008b6051fe0000000000000020850000004f00000085000000080000009500000000000000a94be8c51261be6a99e5e06bb0a232d5e1f59f18f845f82e9a7cde9e8f4b9197701b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8f91633a8b9c70e804744dc081ac69cfea0a6000000f70c6792f2888d6fd95f20202866918c3c3771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547bcdac15e52a4b6a2981eb4afadbbdf9157fa5d6ce5b94cd2e44e2129dc6b93993909613e884a43f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080), 0x2, 0xa0d, &(0x7f0000000240)="$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") 938.202423ms ago: executing program 4 (id=398): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) unshare(0x22020600) unshare(0xe020600) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_channels={0x3c}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newneigh={0x34, 0x1c, 0x200, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x1, 0x42, 0x1}, [@NDA_NH_ID={0x8, 0xd, 0xf}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_IFINDEX={0x8, 0x8, r3}]}, 0x34}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 907.870355ms ago: executing program 1 (id=399): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) (async) pipe2$9p(0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='cpuhp_exit\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b7aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe8e7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14be94e558fbcba783de25dc6ec6336f8e61fa770fc40b958d7aa1f11c7edc6e915ea9aeb6c546768e1f082f9054bf0ab096a42724eaa987b11de91760161aa718ad20f5ff8533f54ffe49ffc4e4903ba715f0523297469c8e75ce9461929992d980a5a6e077f0fe35cad38f6e61b60dca50bb9693f3eba90012b2ed421c790b32052d86d9600b197ab0d46aa20c78672d10413e972ce2f6e17d862fa1fe181c66c6839fce7e11aa093307d25dc4314bbbf3f2d78088387dfeb51426e918d2af4218decea28233415e0eaaaae9c8ee669106c46b14052e85ff315d152482f4cfd08878636956e5eed43e3d26a00c246d0bec13c6c26c858d0dc04f907c090e2cd576a058215ff7baa1b4ba2f6b0839edb20ceea4e8b5f7d0c8b4dd6e6f2fdcd306f81d7ba8ecbb3cdb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x104, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff008001fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6075e70000213afffc0200000000000000000000005848de087498ef4e00000000000000000000018800907800000000fe8000000000000000000000000000aa0e010c874a1a0335ae"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) close_range(0xffffffffffffffff, r3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) timerfd_create(0x0, 0x800) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x2, 0x2, @local}, 0x10) (async) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x2, 0x2, @local}, 0x10) recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000038c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000005200)=""/79, 0x4f}, 0x6}], 0x2, 0x40012000, 0x0) sendfile(r2, r1, 0x0, 0xffefffff) (async) sendfile(r2, r1, 0x0, 0xffefffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2c000000}, 0x400c08a) 775.123076ms ago: executing program 3 (id=400): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0xd1bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x40081) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x60}}, 0x0) 725.46036ms ago: executing program 1 (id=401): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000b23504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400c0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 725.0754ms ago: executing program 1 (id=402): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x1, 0x3, 0x10}) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r6, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) 724.11014ms ago: executing program 4 (id=403): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000b000a140000001100010097"], 0x28}}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80080, 0x100) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x102d3e, 0x1d07, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 723.89923ms ago: executing program 3 (id=404): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000980)='./file0\x00', 0x4) 666.417705ms ago: executing program 3 (id=405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3fb, 0x300, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 660.426406ms ago: executing program 4 (id=406): r0 = openat$vsock(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000001ac0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2}, &(0x7f0000000100)=0xc) getresuid(&(0x7f0000000300), &(0x7f0000000140), &(0x7f00000001c0)) (async) getresuid(&(0x7f0000000300), &(0x7f0000000140), &(0x7f00000001c0)) socket$inet_dccp(0x2, 0x6, 0x0) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$inet_int(r1, 0x10d, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") (async) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") openat(r2, &(0x7f0000000600)='./file0\x00', 0x113000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) socket$kcm(0xa, 0x2, 0x11) (async) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) timer_create(0xb, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, r5+60000000}}, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000356000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000030700650000000000000067"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000030700650000000000000067"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 612.45939ms ago: executing program 4 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x8000}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000000c0), 0x4) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe88}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b00004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000, 0x3}, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, r0, 0x40000000000000, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x15, 0x802, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000006fc85b0aed0e74129e09380efe76fe7028935700e3ef6f8380450d51bd95377da839e61e820853e5dc58883a176b6b002c679505621c5ade3dcdffb2a11f2437e906bc5fd9c84a4dbbf7e9286c9a550c80068d9a612b110629649e128da465dbb1af7bfe3e3f49c3e0326c0a5aa732e3de0d1671ca6b78732d86566485"], 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x84}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4f23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000002000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB], 0x28, 0x7ffffff7}}], 0x1, 0x0) 607.80222ms ago: executing program 3 (id=408): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x251, 0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0xe25, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0300000000000001050000bd7c90001289e23e5e95000000c910fe880000000000000000000100000000000000"], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) close(r3) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) 557.488844ms ago: executing program 1 (id=409): ioperm(0x0, 0x9, 0x3) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x129031, 0x0) setresuid(0x0, 0xee00, 0xee00) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 556.910274ms ago: executing program 1 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f0000000140)={{r6, r7+10000000}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000ffe00000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) timerfd_create(0x0, 0x0) (async) clock_gettime(0x0, &(0x7f00000003c0)) (async) timerfd_settime(r5, 0x1, &(0x7f0000000140)={{r6, r7+10000000}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000ffe00000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) (async) 555.724984ms ago: executing program 1 (id=411): r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601070000000000000000000000000500010007000000b7d526add4bb6dd7e9f5bceb6013d406d339eb6feb19d7ed389a8810a955fc78b018d4ad8550f0547b9afb2f1c4dc70ff77c1eb6ec2e2194cbab96a02f84e7b6e134511203"], 0x1c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000e849) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 302.435385ms ago: executing program 2 (id=412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6gre0\x00', 0x10}) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r1, 0x7, &(0x7f0000000100)={0x5f1c, 0x80000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6gre0\x00', 0x10}) (async) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) (async) prlimit64(r1, 0x7, &(0x7f0000000100)={0x5f1c, 0x80000001}, 0x0) (async) 206.283593ms ago: executing program 0 (id=413): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000bd3d04c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400c0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 125.39972ms ago: executing program 0 (id=414): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@discard}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x76, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a1040", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "03c0ab"}, @window={0x3, 0x3}, @mss={0x1e, 0x4, 0x74}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @generic={0x0, 0x5, "111fad"}]}}}}}}}}, 0x0) 125.21762ms ago: executing program 2 (id=415): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000980)='./file0\x00', 0x4) 112.565951ms ago: executing program 0 (id=416): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b00010067726574617000003400028008000700ffffffff05000800080000000500080003000000050009000800000005000800ff000000060010004e20000008000a00", @ANYRES32=r3], 0x6c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) unshare(0x22020600) unshare(0xe020600) poll(&(0x7f0000000100)=[{r5, 0x4}], 0x1, 0x9d) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 89.615293ms ago: executing program 2 (id=417): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0x0, 0x1}, @queue}], 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x10000]}}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x11) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) 5.483969ms ago: executing program 0 (id=418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3fb, 0x300, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 0s ago: executing program 0 (id=419): bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) socket$kcm(0x29, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$eJzs3TFoE3scB/DfJU372oZH33vLgwfvPRARLRTdBAfrolCQIg6CChURJ2mF2uLWOrk46KzSyUXEzeooLsVFEZyqdKiLoMXB0kGHSHJpbW3F0sSc9D4fuCR397/73ZH7/i8E7i6A3OqJiP6IKEZEb0SUIiJZ3eD/dOipj051zgxFVCrHPyS1dul4anm57oiYjIj90b6ymvHpU/NLs0d2XRsr7bwzfbKzRbu3xsL83NHF24NXHwzsG3/+8t1gEv1Rrs9bvR/NlGwwrS2J+PNnFPtFJG1ZbwGbcezy/VfV3P8VETtq+S9FIdIv7/po+5NS7Ln1vWVvvH/xTyu3FWi+SqVUPQdOVoDcKUREOZJCX0SknwuFvr70N/zrYlfhwsjopd7zI2PD57LuqYBmKUfMHX7U8bD7m/y/Lab5B7avcvpXX81iMdttAVqrev7vPTOxO+Qfckf+Ybtp33RL+Yf8kn/IL/mH/JJ/yC/5h/ySf8gv+Yf8kn/Ir9X5BwDypdKxteuGl29s0+zrkYHWybr/AQAAAAAAAAAAAAAAAAAA1pvqnBlaHlpV8+nNiIVDEdG2Uf1i7XnEEb/VXrs+JtVmK5J0sYac/q/BFTToXsZXX//+Jtv6z/7Ntv7EcMTklYhYqk9Yc/wl9eNv6/74wfzS2QYLNOjAiWzrf76bbf2B2YjH1f5n70b9TyH+rr2v738OpvdP+/oA5S26+KnBFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAyXwIAAP//VeRflA==") (async) truncate(&(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800001811000000000000010000000000000000", @ANYRESHEX, @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004054, 0x0, 0x0) (async) r4 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40086610, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) (async) pread64(r4, &(0x7f00000002c0)=""/68, 0x44, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000040), 0x20000000}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r5, &(0x7f0000000140), 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) kernel console output (not intermixed with test programs): dge_slave_0: entered promiscuous mode [ 26.733072][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.740116][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.766059][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.781110][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.788216][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.795327][ T3266] bridge_slave_1: entered allmulticast mode [ 26.801785][ T3266] bridge_slave_1: entered promiscuous mode [ 26.816705][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.823711][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.849591][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.875967][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.883000][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.890190][ T3265] bridge_slave_0: entered allmulticast mode [ 26.896598][ T3265] bridge_slave_0: entered promiscuous mode [ 26.905311][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 26.915077][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.926787][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.933943][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.941222][ T3265] bridge_slave_1: entered allmulticast mode [ 26.947470][ T3265] bridge_slave_1: entered promiscuous mode [ 26.968126][ T3258] hsr_slave_0: entered promiscuous mode [ 26.974117][ T3258] hsr_slave_1: entered promiscuous mode [ 26.980979][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.026998][ T3266] team0: Port device team_slave_0 added [ 27.037521][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.046636][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.053701][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.060847][ T3259] bridge_slave_0: entered allmulticast mode [ 27.067345][ T3259] bridge_slave_0: entered promiscuous mode [ 27.082351][ T3266] team0: Port device team_slave_1 added [ 27.093269][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.102656][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.109709][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.116935][ T3259] bridge_slave_1: entered allmulticast mode [ 27.123196][ T3259] bridge_slave_1: entered promiscuous mode [ 27.129435][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.136534][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.143975][ T3262] bridge_slave_0: entered allmulticast mode [ 27.150326][ T3262] bridge_slave_0: entered promiscuous mode [ 27.156851][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.163988][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.171094][ T3262] bridge_slave_1: entered allmulticast mode [ 27.177718][ T3262] bridge_slave_1: entered promiscuous mode [ 27.217227][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.224184][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.250142][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.261325][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.268293][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.294168][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.309015][ T3265] team0: Port device team_slave_0 added [ 27.315240][ T3265] team0: Port device team_slave_1 added [ 27.321709][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.331932][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.356368][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.366333][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.391491][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.398452][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.424425][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.448927][ T3259] team0: Port device team_slave_0 added [ 27.456657][ T3266] hsr_slave_0: entered promiscuous mode [ 27.462516][ T3266] hsr_slave_1: entered promiscuous mode [ 27.468300][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.475873][ T3266] Cannot create hsr debugfs directory [ 27.487151][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.494123][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.520021][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.531338][ T3262] team0: Port device team_slave_0 added [ 27.537911][ T3262] team0: Port device team_slave_1 added [ 27.545870][ T3259] team0: Port device team_slave_1 added [ 27.582449][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.589397][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.615384][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.645199][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.652133][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.678044][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.689064][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.696123][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.722071][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.733664][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.740724][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.766611][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.781154][ T3265] hsr_slave_0: entered promiscuous mode [ 27.787332][ T3265] hsr_slave_1: entered promiscuous mode [ 27.793165][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.800714][ T3265] Cannot create hsr debugfs directory [ 27.853934][ T3262] hsr_slave_0: entered promiscuous mode [ 27.860054][ T3262] hsr_slave_1: entered promiscuous mode [ 27.866246][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.873807][ T3262] Cannot create hsr debugfs directory [ 27.881012][ T3259] hsr_slave_0: entered promiscuous mode [ 27.887004][ T3259] hsr_slave_1: entered promiscuous mode [ 27.892838][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.900419][ T3259] Cannot create hsr debugfs directory [ 27.917270][ T3258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.939650][ T3258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.961320][ T3258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.971560][ T3258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.066930][ T3266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.078793][ T3266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.087395][ T3266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.097971][ T3266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.135939][ T3265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.156574][ T3265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.166119][ T3265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.177438][ T3259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.186498][ T3259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.194944][ T3265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.207806][ T3259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.216056][ T3259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.236436][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.251198][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.258903][ T3262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.267382][ T3262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.286407][ T3262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.296789][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.303965][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.315180][ T3262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.331200][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.338245][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.355835][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.389788][ T3258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.400184][ T3258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.424656][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.437089][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.462712][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.471019][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.478057][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.487115][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.494176][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.529983][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.537050][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.545771][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.552789][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.574332][ T3259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.584731][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.611229][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.629378][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.639055][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.647882][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.666129][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.675084][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.682139][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.690802][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.697856][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.729326][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.736400][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.746223][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.753315][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.785276][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.795682][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.817177][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.858416][ T3258] veth0_vlan: entered promiscuous mode [ 28.882716][ T3258] veth1_vlan: entered promiscuous mode [ 28.894753][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.955194][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.989196][ T3258] veth0_macvtap: entered promiscuous mode [ 28.996536][ T3266] veth0_vlan: entered promiscuous mode [ 29.010729][ T3259] veth0_vlan: entered promiscuous mode [ 29.018593][ T3266] veth1_vlan: entered promiscuous mode [ 29.025664][ T3258] veth1_macvtap: entered promiscuous mode [ 29.038810][ T3259] veth1_vlan: entered promiscuous mode [ 29.063664][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.077449][ T3259] veth0_macvtap: entered promiscuous mode [ 29.085832][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.101196][ T3258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.109920][ T3258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.118631][ T3258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.127400][ T3258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.140969][ T3266] veth0_macvtap: entered promiscuous mode [ 29.157921][ T3259] veth1_macvtap: entered promiscuous mode [ 29.165559][ T3266] veth1_macvtap: entered promiscuous mode [ 29.185172][ T3262] veth0_vlan: entered promiscuous mode [ 29.194161][ T3265] veth0_vlan: entered promiscuous mode [ 29.201709][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.212237][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.222875][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.236090][ T3262] veth1_vlan: entered promiscuous mode [ 29.243084][ T3265] veth1_vlan: entered promiscuous mode [ 29.249385][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.259846][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.269705][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.280124][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.290538][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.298649][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.309106][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.319397][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.331869][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 29.331883][ T29] audit: type=1400 audit(1724148777.669:116): avc: denied { read write } for pid=3258 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.362695][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.373232][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.383103][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.393522][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.404485][ T29] audit: type=1400 audit(1724148777.669:117): avc: denied { open } for pid=3258 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.428487][ T29] audit: type=1400 audit(1724148777.669:118): avc: denied { ioctl } for pid=3258 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.431303][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.454060][ T29] audit: type=1400 audit(1724148777.709:119): avc: denied { open } for pid=3397 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.480126][ T29] audit: type=1400 audit(1724148777.709:120): avc: denied { perfmon } for pid=3397 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.488638][ T3259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.500721][ T29] audit: type=1400 audit(1724148777.709:121): avc: denied { kernel } for pid=3397 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.528497][ T3259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.537287][ T3259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.546114][ T3259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.554978][ T29] audit: type=1400 audit(1724148777.829:122): avc: denied { map_create } for pid=3397 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.573931][ T29] audit: type=1400 audit(1724148777.829:123): avc: denied { create } for pid=3397 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.593321][ T29] audit: type=1400 audit(1724148777.829:124): avc: denied { setopt } for pid=3397 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.618965][ T3262] veth0_macvtap: entered promiscuous mode [ 29.626620][ T3262] veth1_macvtap: entered promiscuous mode [ 29.636369][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.646919][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.654403][ T29] audit: type=1400 audit(1724148777.899:125): avc: denied { prog_load } for pid=3397 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.656716][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.685810][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.695648][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.706107][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.717757][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.731929][ T3266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.740703][ T3266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.749618][ T3266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.758362][ T3266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.775002][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.785591][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.795394][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.805855][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.815731][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.826168][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.837577][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.864754][ T3262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.873462][ T3262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.882166][ T3262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.890981][ T3262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.913434][ T3265] veth0_macvtap: entered promiscuous mode [ 29.922579][ T3265] veth1_macvtap: entered promiscuous mode [ 29.943698][ T3403] loop2: detected capacity change from 0 to 128 [ 29.953345][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.954093][ T3403] vfat: Unknown parameter '' [ 29.963868][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.978538][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.989086][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.998988][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.009436][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.019357][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.029973][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.041982][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.054088][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.064532][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.074335][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.084900][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.094725][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.105156][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.115030][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.116732][ T3407] loop2: detected capacity change from 0 to 4096 [ 30.125507][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.142615][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.151091][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.160008][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.168860][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.177705][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.265047][ T3413] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.292799][ T3415] loop1: detected capacity change from 0 to 512 [ 30.355322][ T3407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.373101][ T3415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.394377][ T3407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.397167][ T3421] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 30.424302][ T3415] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.440956][ T3407] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 30.479460][ T3426] pim6reg: entered allmulticast mode [ 30.532511][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.612086][ T3424] loop3: detected capacity change from 0 to 4096 [ 30.656301][ T3424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.719924][ T3424] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.821110][ T3428] loop1: detected capacity change from 0 to 1024 [ 30.830857][ T3428] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.846284][ T3428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.888941][ T3438] loop2: detected capacity change from 0 to 512 [ 30.932861][ T3438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.964613][ T3438] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.978383][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.979333][ T3438] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.085808][ T3442] loop1: detected capacity change from 0 to 8192 [ 31.099373][ T3442] ======================================================= [ 31.099373][ T3442] WARNING: The mand mount option has been deprecated and [ 31.099373][ T3442] and is ignored by this kernel. Remove the mand [ 31.099373][ T3442] option from the mount to silence this warning. [ 31.099373][ T3442] ======================================================= [ 32.004223][ T3463] loop0: detected capacity change from 0 to 512 [ 32.067423][ T3467] loop2: detected capacity change from 0 to 512 [ 32.083663][ T3467] EXT4-fs: Ignoring removed i_version option [ 32.085972][ T3463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.089772][ T3467] EXT4-fs: Ignoring removed nobh option [ 32.109098][ T3463] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.119541][ T3467] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.132666][ T3467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.142857][ T3463] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.17: Failed to acquire dquot type 0 [ 32.155999][ T3467] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.158459][ T3463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 32.170324][ T3467] EXT4-fs (loop2): 1 truncate cleaned up [ 32.191307][ T3467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.222182][ T3463] syz.0.17 (3463) used greatest stack depth: 11584 bytes left [ 32.230809][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.287208][ T3467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.287681][ T3473] loop3: detected capacity change from 0 to 128 [ 32.302879][ T3473] vfat: Unknown parameter '' [ 32.308201][ T3467] syz.2.18 (3467) used greatest stack depth: 11392 bytes left [ 32.409496][ T3477] loop2: detected capacity change from 0 to 512 [ 32.424225][ T3477] EXT4-fs: Ignoring removed oldalloc option [ 32.441104][ T3477] EXT4-fs: Ignoring removed i_version option [ 32.451352][ T3477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.472411][ T3477] EXT4-fs (loop2): orphan cleanup on readonly fs [ 32.486157][ T3477] EXT4-fs (loop2): 1 truncate cleaned up [ 32.497132][ T3476] loop3: detected capacity change from 0 to 4096 [ 32.504032][ T3477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.519575][ T3476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.536920][ T3476] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.580697][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.627262][ T3484] pim6reg: entered allmulticast mode [ 33.152424][ T3488] loop3: detected capacity change from 0 to 1024 [ 33.160966][ T3488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.231655][ T3492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 33.298705][ T3498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.307555][ T3498] netlink: 52 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.316353][ T3498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.325330][ T3498] vlan0: entered allmulticast mode [ 33.330446][ T3498] veth0_vlan: entered allmulticast mode [ 33.410840][ T3506] loop0: detected capacity change from 0 to 128 [ 33.417558][ T3506] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 33.427427][ T3506] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00050002) [ 33.437548][ T3506] FAT-fs (loop0): Filesystem has been set read-only [ 33.485240][ T3508] loop2: detected capacity change from 0 to 2048 [ 33.492218][ T3508] EXT4-fs (loop2): unsupported inode size: 32768 [ 33.498621][ T3508] EXT4-fs (loop2): blocksize: 2048 [ 33.509797][ T3506] loop0: detected capacity change from 0 to 512 [ 33.519077][ T3508] loop2: detected capacity change from 0 to 1024 [ 33.526713][ T3508] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 33.536524][ T3508] EXT4-fs (loop2): group descriptors corrupted! [ 33.546827][ T3506] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.28: bad orphan inode 1 [ 33.580131][ T3506] EXT4-fs (loop0): Remounting filesystem read-only [ 33.594149][ T3506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.606234][ T3506] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 33.613056][ T3506] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.739755][ T3520] Cannot find del_set index 0 as target [ 33.752229][ T3523] loop0: detected capacity change from 0 to 2048 [ 33.760676][ T3523] EXT4-fs (loop0): unsupported inode size: 32768 [ 33.767085][ T3523] EXT4-fs (loop0): blocksize: 2048 [ 33.789772][ T3511] loop4: detected capacity change from 0 to 512 [ 33.796692][ T3511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.816215][ T3523] loop0: detected capacity change from 0 to 1024 [ 33.822946][ T3523] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 33.832706][ T3523] EXT4-fs (loop0): group descriptors corrupted! [ 33.845216][ T3511] EXT4-fs (loop4): 1 orphan inode deleted [ 33.851005][ T3511] EXT4-fs (loop4): 1 truncate cleaned up [ 33.860546][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.881469][ T3511] pimreg: entered allmulticast mode [ 33.889905][ T3511] pimreg: left allmulticast mode [ 33.956868][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.019791][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.079756][ T3534] loop3: detected capacity change from 0 to 2048 [ 34.095329][ T3534] EXT4-fs (loop3): unsupported inode size: 32768 [ 34.101715][ T3534] EXT4-fs (loop3): blocksize: 2048 [ 34.121299][ T3534] loop3: detected capacity change from 0 to 1024 [ 34.128894][ T3534] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 34.138652][ T3534] EXT4-fs (loop3): group descriptors corrupted! [ 34.174199][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 34.232941][ T3528] syz.0.35 (3528) used greatest stack depth: 11088 bytes left [ 34.247098][ T3538] pim6reg: entered allmulticast mode [ 34.263053][ T3538] pim6reg: left allmulticast mode [ 34.325294][ T3545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 34.340616][ T3538] syz.3.38 (3538) used greatest stack depth: 11016 bytes left [ 34.363360][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 34.363370][ T29] audit: type=1400 audit(1724148782.699:244): avc: denied { execute } for pid=3547 comm="syz.3.42" path="/9/bus" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.402471][ T29] audit: type=1326 audit(1724148782.739:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3544 comm="syz.4.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa5c8e9e79 code=0x0 [ 34.425131][ T29] audit: type=1400 audit(1724148782.739:246): avc: denied { create } for pid=3547 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 34.444609][ T29] audit: type=1400 audit(1724148782.739:247): avc: denied { ioctl } for pid=3547 comm="syz.3.42" path="socket:[3824]" dev="sockfs" ino=3824 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 34.468878][ T29] audit: type=1400 audit(1724148782.739:248): avc: denied { listen } for pid=3547 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.488166][ T29] audit: type=1400 audit(1724148782.739:249): avc: denied { accept } for pid=3547 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.510305][ T29] audit: type=1400 audit(1724148782.849:250): avc: denied { read } for pid=3548 comm="syz.0.43" name="usbmon5" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.533915][ T29] audit: type=1400 audit(1724148782.849:251): avc: denied { open } for pid=3548 comm="syz.0.43" path="/dev/usbmon5" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.579260][ T3558] loop3: detected capacity change from 0 to 512 [ 34.587649][ T3558] EXT4-fs: Ignoring removed bh option [ 34.590702][ T3560] loop2: detected capacity change from 0 to 2048 [ 34.600618][ T3558] EXT4-fs (loop3): 1 truncate cleaned up [ 34.608016][ T29] audit: type=1400 audit(1724148782.949:252): avc: denied { getopt } for pid=3559 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.608499][ T3560] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 34.627677][ T3558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.665791][ T29] audit: type=1400 audit(1724148783.009:253): avc: denied { mounton } for pid=3557 comm="syz.3.44" path="/10/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.757239][ T3558] loop3: detected capacity change from 512 to 64 [ 34.775691][ T3570] syz.3.44: attempt to access beyond end of device [ 34.775691][ T3570] loop3: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 34.788877][ T3570] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 34.800013][ T3570] Buffer I/O error on device loop3, logical block 36 [ 34.810305][ T3570] syz.3.44: attempt to access beyond end of device [ 34.810305][ T3570] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 34.823518][ T3570] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 34.826733][ T3572] loop2: detected capacity change from 0 to 128 [ 34.834781][ T3570] Buffer I/O error on device loop3, logical block 255 [ 34.843294][ T3558] netlink: 'syz.3.44': attribute type 4 has an invalid length. [ 34.848413][ T3572] vfat: Unknown parameter '' [ 34.887076][ T3558] syz.3.44 (3558) used greatest stack depth: 10832 bytes left [ 34.912345][ T3266] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /10/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 34.912644][ T3460] syz.1.12 (3460) used greatest stack depth: 10264 bytes left [ 34.943218][ T3266] VFS: Lookup of '.' in ext4 loop3 would have caused loop [ 34.950736][ T3266] VFS: Lookup of '.' in ext4 loop3 would have caused loop [ 34.955421][ T3572] loop2: detected capacity change from 0 to 4096 [ 34.966678][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.979530][ T3572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.006848][ T3575] FAULT_INJECTION: forcing a failure. [ 35.006848][ T3575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.019904][ T3575] CPU: 0 UID: 0 PID: 3575 Comm: syz.2.50 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 35.030444][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 35.040480][ T3575] Call Trace: [ 35.043792][ T3575] [ 35.046791][ T3575] dump_stack_lvl+0xf2/0x150 [ 35.051370][ T3575] dump_stack+0x15/0x20 [ 35.055557][ T3575] should_fail_ex+0x229/0x230 [ 35.060313][ T3575] should_fail+0xb/0x10 [ 35.064453][ T3575] should_fail_usercopy+0x1a/0x20 [ 35.069535][ T3575] copy_page_from_iter_atomic+0x22a/0xda0 [ 35.075289][ T3575] ? shmem_write_begin+0xa0/0x1c0 [ 35.080326][ T3575] ? shmem_write_begin+0x10c/0x1c0 [ 35.085464][ T3575] generic_perform_write+0x323/0x580 [ 35.090838][ T3575] shmem_file_write_iter+0xc8/0xf0 [ 35.095996][ T3575] vfs_write+0x78f/0x900 [ 35.100243][ T3575] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 35.106080][ T3575] ksys_write+0xeb/0x1b0 [ 35.110340][ T3575] __x64_sys_write+0x42/0x50 [ 35.114992][ T3575] x64_sys_call+0x27dd/0x2d60 [ 35.119660][ T3575] do_syscall_64+0xc9/0x1c0 [ 35.124297][ T3575] ? clear_bhb_loop+0x55/0xb0 [ 35.129060][ T3575] ? clear_bhb_loop+0x55/0xb0 [ 35.133744][ T3575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.139668][ T3575] RIP: 0033:0x7f8586f2895f [ 35.144150][ T3575] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 35.163745][ T3575] RSP: 002b:00007f8585ba0df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 35.172250][ T3575] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007f8586f2895f [ 35.180245][ T3575] RDX: 0000000000020000 RSI: 00007f857d781000 RDI: 0000000000000007 [ 35.188273][ T3575] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002cd [ 35.196338][ T3575] R10: 0000000020000902 R11: 0000000000000293 R12: 0000000000000007 [ 35.204435][ T3575] R13: 00007f8585ba0ef0 R14: 00007f8585ba0eb0 R15: 00007f857d781000 [ 35.212428][ T3575] [ 35.217687][ T3575] loop2: detected capacity change from 0 to 256 [ 35.225015][ T3575] vfat: Deprecated parameter 'posix' [ 35.227860][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.230310][ T3575] FAT-fs: "posix" option is obsolete, not supported now [ 35.271082][ T3580] loop4: detected capacity change from 0 to 256 [ 35.396517][ T3596] loop2: detected capacity change from 0 to 2048 [ 35.455454][ T3596] loop2: p1 < > p4 [ 35.457317][ T3585] chnl_net:caif_netlink_parms(): no params data found [ 35.466809][ T3596] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.497618][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.504720][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.505704][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.511971][ T3585] bridge_slave_0: entered allmulticast mode [ 35.529245][ T3585] bridge_slave_0: entered promiscuous mode [ 35.536247][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.543444][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.550978][ T3585] bridge_slave_1: entered allmulticast mode [ 35.558312][ T3585] bridge_slave_1: entered promiscuous mode [ 35.575750][ T3585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.588845][ T3585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.594492][ T3605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 35.612104][ T3585] team0: Port device team_slave_0 added [ 35.618541][ T3585] team0: Port device team_slave_1 added [ 35.632338][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.639366][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.665362][ T3585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.676605][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.683557][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.709527][ T3585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.728894][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.750813][ T3585] hsr_slave_0: entered promiscuous mode [ 35.756812][ T3585] hsr_slave_1: entered promiscuous mode [ 35.762595][ T3585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.770189][ T3585] Cannot create hsr debugfs directory [ 35.798164][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.846941][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.867036][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.930632][ T40] bridge_slave_1: left allmulticast mode [ 35.936288][ T40] bridge_slave_1: left promiscuous mode [ 35.941900][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.949725][ T40] bridge_slave_0: left allmulticast mode [ 35.955378][ T40] bridge_slave_0: left promiscuous mode [ 35.961005][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.046498][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.056829][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.066851][ T40] bond0 (unregistering): Released all slaves [ 36.120620][ T3610] chnl_net:caif_netlink_parms(): no params data found [ 36.154052][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.161105][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.169239][ T3610] bridge_slave_0: entered allmulticast mode [ 36.175768][ T3610] bridge_slave_0: entered promiscuous mode [ 36.182743][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.190020][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.198627][ T3610] bridge_slave_1: entered allmulticast mode [ 36.205560][ T3610] bridge_slave_1: entered promiscuous mode [ 36.213439][ T40] hsr_slave_0: left promiscuous mode [ 36.219218][ T40] hsr_slave_1: left promiscuous mode [ 36.225176][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.232543][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.240455][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.247858][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.256799][ T40] veth1_macvtap: left promiscuous mode [ 36.262247][ T40] veth0_macvtap: left promiscuous mode [ 36.267765][ T40] veth1_vlan: left promiscuous mode [ 36.273022][ T40] veth0_vlan: left promiscuous mode [ 36.348617][ T3630] 9pnet_fd: Insufficient options for proto=fd [ 36.355149][ T40] team0 (unregistering): Port device team_slave_1 removed [ 36.362489][ T3630] loop4: detected capacity change from 0 to 164 [ 36.369074][ T40] team0 (unregistering): Port device team_slave_0 removed [ 36.380155][ T3630] 9pnet_fd: Insufficient options for proto=fd [ 36.413531][ T3627] netlink: 'syz.2.62': attribute type 39 has an invalid length. [ 36.417441][ T3634] FAULT_INJECTION: forcing a failure. [ 36.417441][ T3634] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 36.434675][ T3634] CPU: 0 UID: 0 PID: 3634 Comm: syz.4.64 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 36.445185][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 36.455254][ T3634] Call Trace: [ 36.458549][ T3634] [ 36.461473][ T3634] dump_stack_lvl+0xf2/0x150 [ 36.466097][ T3634] dump_stack+0x15/0x20 [ 36.470258][ T3634] should_fail_ex+0x229/0x230 [ 36.474922][ T3634] should_fail_alloc_page+0xfd/0x110 [ 36.480273][ T3634] __alloc_pages_noprof+0x109/0x360 [ 36.485519][ T3634] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 36.490932][ T3634] folio_alloc_mpol_noprof+0x36/0x70 [ 36.496217][ T3634] shmem_get_folio_gfp+0x3eb/0xd80 [ 36.501400][ T3634] shmem_write_begin+0xa0/0x1c0 [ 36.506249][ T3634] generic_perform_write+0x1b4/0x580 [ 36.511625][ T3634] shmem_file_write_iter+0xc8/0xf0 [ 36.516724][ T3634] vfs_write+0x78f/0x900 [ 36.520953][ T3634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 36.526746][ T3634] ksys_write+0xeb/0x1b0 [ 36.530982][ T3634] __x64_sys_write+0x42/0x50 [ 36.535609][ T3634] x64_sys_call+0x27dd/0x2d60 [ 36.540276][ T3634] do_syscall_64+0xc9/0x1c0 [ 36.544761][ T3634] ? clear_bhb_loop+0x55/0xb0 [ 36.549445][ T3634] ? clear_bhb_loop+0x55/0xb0 [ 36.554110][ T3634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.560004][ T3634] RIP: 0033:0x7faa5c8e895f [ 36.564451][ T3634] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 36.584076][ T3634] RSP: 002b:00007faa5b560df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 36.592493][ T3634] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007faa5c8e895f [ 36.600445][ T3634] RDX: 0000000000020000 RSI: 00007faa53141000 RDI: 0000000000000007 [ 36.608454][ T3634] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002cd [ 36.616480][ T3634] R10: 0000000020000902 R11: 0000000000000293 R12: 0000000000000007 [ 36.624432][ T3634] R13: 00007faa5b560ef0 R14: 00007faa5b560eb0 R15: 00007faa53141000 [ 36.632382][ T3634] [ 36.640215][ T3627] veth1_macvtap: left promiscuous mode [ 36.668358][ T3610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.680272][ T3610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.698346][ T3610] team0: Port device team_slave_0 added [ 36.704656][ T3610] team0: Port device team_slave_1 added [ 36.727776][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 36.736975][ T3610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.743947][ T3610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.769889][ T3610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.782177][ T3610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.789183][ T3610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.815121][ T3610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.842275][ T3610] hsr_slave_0: entered promiscuous mode [ 36.848602][ T3610] hsr_slave_1: entered promiscuous mode [ 36.854663][ T3610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.862195][ T3610] Cannot create hsr debugfs directory [ 36.890327][ T3643] loop4: detected capacity change from 0 to 2048 [ 36.900583][ T3585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.905433][ T3643] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.66: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 36.926053][ T3643] EXT4-fs (loop4): get root inode failed [ 36.926914][ T3585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.931674][ T3643] EXT4-fs (loop4): mount failed [ 36.947368][ T3585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.957870][ T3585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.985393][ T3610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.027143][ T3649] loop2: detected capacity change from 0 to 512 [ 37.034093][ T3649] EXT4-fs (loop2): fragment/cluster size (4096) != block size (1024) [ 37.046292][ T3610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.058874][ T3585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.073841][ T3585] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.084626][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.091688][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.101108][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.108261][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.127450][ T3610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.168002][ T3610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.196595][ T3585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.230476][ T50] bridge_slave_1: left allmulticast mode [ 37.236157][ T50] bridge_slave_1: left promiscuous mode [ 37.241754][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.249514][ T50] bridge_slave_0: left allmulticast mode [ 37.255221][ T50] bridge_slave_0: left promiscuous mode [ 37.260902][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.346194][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.356465][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.366150][ T50] bond0 (unregistering): Released all slaves [ 37.383018][ T3610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.392251][ T3610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.403042][ T3610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.411987][ T3610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.425922][ T3585] veth0_vlan: entered promiscuous mode [ 37.436023][ T50] hsr_slave_0: left promiscuous mode [ 37.441641][ T50] hsr_slave_1: left promiscuous mode [ 37.447425][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.454819][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.462449][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.469942][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.478799][ T50] veth1_macvtap: left promiscuous mode [ 37.484459][ T50] veth0_macvtap: left promiscuous mode [ 37.489987][ T50] veth1_vlan: left promiscuous mode [ 37.495213][ T50] veth0_vlan: left promiscuous mode [ 37.571147][ T50] team0 (unregistering): Port device team_slave_1 removed [ 37.577002][ T3667] 9pnet_virtio: no channels available for device [ 37.585647][ T3667] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.585962][ T50] team0 (unregistering): Port device team_slave_0 removed [ 37.619575][ T3669] loop4: detected capacity change from 0 to 256 [ 37.627397][ T3669] vfat: Deprecated parameter 'posix' [ 37.632724][ T3669] FAT-fs: "posix" option is obsolete, not supported now [ 37.640432][ T3585] veth1_vlan: entered promiscuous mode [ 37.675508][ T3585] veth0_macvtap: entered promiscuous mode [ 37.683915][ T3585] veth1_macvtap: entered promiscuous mode [ 37.698177][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.708689][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.718772][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.729217][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.739073][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.749533][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.760001][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.771113][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.781568][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.791386][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.801914][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.811731][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.822201][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.833147][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.844011][ T3585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.852714][ T3585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.861534][ T3585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.870337][ T3585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.890479][ T3610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.912795][ T3610] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.930694][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.937802][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.947846][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.954925][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.968961][ T3683] loop3: detected capacity change from 0 to 512 [ 37.977560][ T3681] Zero length message leads to an empty skb [ 37.980222][ T3683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.55: bg 0: block 35: padding at end of block bitmap is not set [ 38.009803][ T3610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.020170][ T3610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.033216][ T3683] EXT4-fs (loop3): Remounting filesystem read-only [ 38.053870][ T3683] EXT4-fs (loop3): 1 truncate cleaned up [ 38.059877][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.087000][ T3610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.093921][ T3683] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 38.100757][ T3683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.207394][ T3610] veth0_vlan: entered promiscuous mode [ 38.227230][ T3610] veth1_vlan: entered promiscuous mode [ 38.250315][ T3610] veth0_macvtap: entered promiscuous mode [ 38.278071][ T3610] veth1_macvtap: entered promiscuous mode [ 38.300555][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.311247][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.321091][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.331636][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.341624][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.352063][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.361991][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.372585][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.415935][ T3610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.427117][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.437569][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.447472][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.457891][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.467712][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.478218][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.488074][ T3610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.498578][ T3610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.522836][ T3732] loop3: detected capacity change from 0 to 1024 [ 38.537666][ T3610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.552722][ T3610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.561508][ T3610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.570226][ T3610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.579037][ T3610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.621326][ T3737] loop3: detected capacity change from 0 to 512 [ 38.650534][ T3737] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.662055][ T3737] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 38.672170][ T3737] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.87: Corrupt directory, running e2fsck is recommended [ 38.701022][ T3741] loop1: detected capacity change from 0 to 128 [ 38.708539][ T3737] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 38.717107][ T3737] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.87: corrupted in-inode xattr: invalid ea_ino [ 38.725955][ T3741] vfat: Unknown parameter '' [ 38.731425][ T3737] EXT4-fs (loop3): Remounting filesystem read-only [ 38.741900][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.755321][ T3737] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 38.762170][ T3737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.822204][ T3741] loop1: detected capacity change from 0 to 4096 [ 38.843004][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.864707][ T3741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.918382][ T3753] loop3: detected capacity change from 0 to 512 [ 38.929991][ T3755] loop1: detected capacity change from 0 to 512 [ 38.943662][ T3753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.965559][ T3753] EXT4-fs (loop3): 1 orphan inode deleted [ 38.971292][ T3753] EXT4-fs (loop3): 1 truncate cleaned up [ 38.979100][ T3755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.984196][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.993006][ T3762] FAULT_INJECTION: forcing a failure. [ 38.993006][ T3762] name failslab, interval 1, probability 0, space 0, times 0 [ 39.016613][ T3762] CPU: 1 UID: 0 PID: 3762 Comm: syz.4.92 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 39.024241][ T3755] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.027221][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.027234][ T3762] Call Trace: [ 39.027240][ T3762] [ 39.027246][ T3762] dump_stack_lvl+0xf2/0x150 [ 39.058417][ T3762] dump_stack+0x15/0x20 [ 39.062590][ T3762] should_fail_ex+0x229/0x230 [ 39.067315][ T3762] ? getname_flags+0x81/0x3b0 [ 39.072032][ T3762] should_failslab+0x8f/0xb0 [ 39.076693][ T3762] kmem_cache_alloc_noprof+0x4c/0x290 [ 39.082077][ T3762] getname_flags+0x81/0x3b0 [ 39.086602][ T3762] getname+0x17/0x20 [ 39.090502][ T3762] do_sys_openat2+0x67/0x120 [ 39.092411][ T3755] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.90: corrupted xattr block 33: overlapping e_value [ 39.095086][ T3762] __x64_sys_openat+0xf3/0x120 [ 39.113285][ T3762] x64_sys_call+0x1025/0x2d60 [ 39.117962][ T3762] do_syscall_64+0xc9/0x1c0 [ 39.122577][ T3762] ? clear_bhb_loop+0x55/0xb0 [ 39.127255][ T3762] ? clear_bhb_loop+0x55/0xb0 [ 39.131994][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.137895][ T3762] RIP: 0033:0x7faa5c8e8810 [ 39.142297][ T3762] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 39.161919][ T3762] RSP: 002b:00007faa5b560da0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 39.170374][ T3762] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faa5c8e8810 [ 39.178341][ T3762] RDX: 0000000000000002 RSI: 00007faa5b560eb0 RDI: 00000000ffffff9c [ 39.186335][ T3762] RBP: 00007faa5b560eb0 R08: 0000000000000000 R09: 00000000000002cd [ 39.194299][ T3762] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 39.202261][ T3762] R13: 00007faa5b560ef0 R14: 00007faa5b560eb0 R15: 00007faa53141000 [ 39.210223][ T3762] [ 39.223916][ T3755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 39.229833][ T3764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 39.253132][ T3755] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.90: corrupted xattr block 33: overlapping e_value [ 39.290930][ T3755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 39.301838][ T3770] loop4: detected capacity change from 0 to 1024 [ 39.308456][ T3755] EXT4-fs error (device loop1): ext4_xattr_block_list:768: inode #15: comm syz.1.90: corrupted xattr block 33: overlapping e_value [ 39.328954][ T3770] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.371540][ T3770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.406791][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.422823][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.453187][ T3781] loop1: detected capacity change from 0 to 256 [ 39.462676][ T3781] capability: warning: `syz.1.97' uses deprecated v2 capabilities in a way that may be insecure [ 39.521752][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 39.565617][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 39.605027][ T3788] loop1: detected capacity change from 0 to 2048 [ 39.628603][ T3779] loop2: detected capacity change from 0 to 4096 [ 39.684035][ T3788] EXT4-fs (loop1): can't mount with commit=116, fs mounted w/o journal [ 39.698100][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.766944][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.923860][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 39.923874][ T29] audit: type=1400 audit(1724148788.249:295): avc: denied { setopt } for pid=3772 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.987732][ T29] audit: type=1400 audit(1724148788.309:296): avc: denied { read } for pid=3772 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.039518][ T29] audit: type=1400 audit(1724148788.359:297): avc: denied { map } for pid=3772 comm="syz.2.96" path="/27/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.061651][ T29] audit: type=1400 audit(1724148788.359:298): avc: denied { read write execute } for pid=3772 comm="syz.2.96" path="/27/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.085090][ T29] audit: type=1400 audit(1724148788.379:299): avc: denied { open } for pid=3772 comm="syz.2.96" path="/27/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.247584][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.251465][ T3805] loop3: detected capacity change from 0 to 1024 [ 40.283800][ T29] audit: type=1400 audit(1724148788.609:300): avc: denied { remount } for pid=3804 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.303395][ T29] audit: type=1400 audit(1724148788.619:301): avc: denied { watch } for pid=3804 comm="syz.3.105" path="/11/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.325421][ T29] audit: type=1400 audit(1724148788.619:302): avc: denied { read } for pid=3804 comm="syz.3.105" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 40.348214][ T29] audit: type=1400 audit(1724148788.619:303): avc: denied { open } for pid=3804 comm="syz.3.105" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 40.419634][ T29] audit: type=1400 audit(1724148788.759:304): avc: denied { ioctl } for pid=3816 comm="syz.1.109" path="socket:[5604]" dev="sockfs" ino=5604 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.455545][ T3819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 40.477537][ T3821] xt_TCPMSS: Only works on TCP SYN packets [ 40.535424][ T3826] loop2: detected capacity change from 0 to 128 [ 40.555978][ T3826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.575939][ T3835] pim6reg: entered allmulticast mode [ 40.584290][ T3826] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.692697][ T3258] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.745580][ T3844] loop1: detected capacity change from 0 to 2048 [ 40.768615][ T3844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.773552][ T3848] loop2: detected capacity change from 0 to 1024 [ 40.798520][ T3848] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.827279][ T3848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.886897][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.950868][ T3854] loop2: detected capacity change from 0 to 256 [ 41.095658][ T3854] FAT-fs (loop2): Directory bread(block 64) failed [ 41.102234][ T3854] FAT-fs (loop2): Directory bread(block 65) failed [ 41.122416][ T3854] FAT-fs (loop2): Directory bread(block 66) failed [ 41.140337][ T3854] FAT-fs (loop2): Directory bread(block 67) failed [ 41.148129][ T3854] FAT-fs (loop2): Directory bread(block 68) failed [ 41.156077][ T3854] FAT-fs (loop2): Directory bread(block 69) failed [ 41.163024][ T3854] FAT-fs (loop2): Directory bread(block 70) failed [ 41.170845][ T3854] FAT-fs (loop2): Directory bread(block 71) failed [ 41.177392][ T3854] FAT-fs (loop2): Directory bread(block 72) failed [ 41.184759][ T3854] FAT-fs (loop2): Directory bread(block 73) failed [ 41.210641][ T3860] loop4: detected capacity change from 0 to 512 [ 41.218393][ T3860] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 41.225441][ T3854] 9pnet_fd: Insufficient options for proto=fd [ 41.271924][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.120'. [ 41.296462][ T3867] xfrm1: entered promiscuous mode [ 41.301511][ T3867] xfrm1: entered allmulticast mode [ 41.330541][ T3867] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 41.352303][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 41.437570][ T3883] loop3: detected capacity change from 0 to 512 [ 41.449234][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.460543][ T3884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.468419][ T3883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.482058][ T3883] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.497438][ T3883] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.126: corrupted xattr block 32: bad e_name length [ 41.511138][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 41.517750][ T3883] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 41.527574][ T3883] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 41.545372][ T3901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3901 comm=syz.4.129 [ 41.584246][ T3906] loop1: detected capacity change from 0 to 512 [ 41.601168][ T3906] EXT4-fs: Invalid want_extra_isize 0 [ 41.667233][ T3908] loop1: detected capacity change from 0 to 128 [ 41.673898][ T3908] vfat: Unknown parameter 'freezer.self_freezing' [ 41.700735][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.725441][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 41.734938][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 41.747499][ T3915] loop3: detected capacity change from 0 to 764 [ 41.753859][ T3915] iso9660: Unknown parameter '' [ 42.157849][ T3922] loop2: detected capacity change from 0 to 512 [ 42.164615][ T3922] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.175290][ T3922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 42.183191][ T3922] System zones: 1-12 [ 42.187946][ T3922] EXT4-fs (loop2): 1 truncate cleaned up [ 42.194158][ T3922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.216975][ T3258] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.238634][ T3258] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 42.259140][ T3258] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.280700][ T3258] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 42.300673][ T3258] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.322829][ T3258] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 42.342685][ T3258] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.364451][ T3258] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 42.385257][ T3258] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /32/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 42.406852][ T3258] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 42.504160][ T3936] vhci_hcd: invalid port number 0 [ 42.509237][ T3937] vhci_hcd: invalid port number 0 [ 42.551151][ T3942] loop1: detected capacity change from 0 to 512 [ 42.560244][ T3942] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.141: casefold flag without casefold feature [ 42.572973][ T3942] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.141: couldn't read orphan inode 15 (err -117) [ 42.585594][ T3942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.658580][ T3947] sctp: [Deprecated]: syz.3.143 (pid 3947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.658580][ T3947] Use struct sctp_sack_info instead [ 42.688063][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.708818][ T3954] bond1: entered promiscuous mode [ 42.713894][ T3954] bond1: entered allmulticast mode [ 42.719241][ T3954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.727893][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.744603][ T3954] bond1 (unregistering): Released all slaves [ 42.766596][ T3959] syz.1.148: attempt to access beyond end of device [ 42.766596][ T3959] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 42.780882][ T3959] EXT4-fs (loop3): unable to read superblock [ 42.882876][ T3960] chnl_net:caif_netlink_parms(): no params data found [ 42.894687][ T3954] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.923552][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.930666][ T3960] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.938691][ T3960] bridge_slave_0: entered allmulticast mode [ 42.946035][ T3960] bridge_slave_0: entered promiscuous mode [ 42.952650][ T3981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 42.962310][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.969467][ T3960] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.978190][ T3960] bridge_slave_1: entered allmulticast mode [ 42.984586][ T3960] bridge_slave_1: entered promiscuous mode [ 43.018983][ T3960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.033703][ T3960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.054701][ T3960] team0: Port device team_slave_0 added [ 43.061130][ T3960] team0: Port device team_slave_1 added [ 43.077900][ T3960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.084939][ T3960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.110947][ T3960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.122174][ T3960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.129155][ T3960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.155148][ T3960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.192497][ T3998] loop4: detected capacity change from 0 to 512 [ 43.203329][ T3998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.210038][ T3998] ext4: Bad value for 'inode_readahead_blks' [ 43.217899][ T3960] hsr_slave_0: entered promiscuous mode [ 43.226487][ T3960] hsr_slave_1: entered promiscuous mode [ 43.234117][ T3960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.245819][ T3960] Cannot create hsr debugfs directory [ 43.247412][ T4011] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.158'. [ 43.268769][ C1] hrtimer: interrupt took 30407 ns [ 43.303007][ T4011] hub 9-0:1.0: USB hub found [ 43.308613][ T4011] hub 9-0:1.0: 8 ports detected [ 43.319825][ T3960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.366336][ T4021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.381381][ T4023] loop4: detected capacity change from 0 to 1024 [ 43.389856][ T4023] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 43.398423][ T4023] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.409487][ T4023] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 43.420369][ T3960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.420630][ T4023] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.442662][ T4023] journal_load_superblock: Cannot read journal superblock [ 43.446010][ T4025] loop1: detected capacity change from 0 to 512 [ 43.449778][ T4023] EXT4-fs (loop4): Could not load journal inode [ 43.462850][ T4025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.473568][ T4025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 43.481745][ T4025] System zones: 1-12 [ 43.486840][ T4025] EXT4-fs (loop1): 1 truncate cleaned up [ 43.493004][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.510722][ T4025] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 43.515781][ T3960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.537745][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.586690][ T3960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.632678][ T3326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 43.640205][ T3326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 43.648145][ T3326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 43.655749][ T3326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 43.663024][ T3326] rtc rtc0: __rtc_set_alarm: err=-22 [ 43.797902][ T3960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.809387][ T3960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.819373][ T3960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.828647][ T3960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.876020][ T3960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.891735][ T3960] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.906173][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.913275][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.922624][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.929692][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.988808][ T3960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.048552][ T3960] veth0_vlan: entered promiscuous mode [ 44.056742][ T3960] veth1_vlan: entered promiscuous mode [ 44.072618][ T3960] veth0_macvtap: entered promiscuous mode [ 44.079856][ T3960] veth1_macvtap: entered promiscuous mode [ 44.090531][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.101046][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.110875][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.121329][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.131179][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.141607][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.151457][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.161850][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.171642][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.182061][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.192591][ T3960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.201107][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.211650][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.221531][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.231989][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.241782][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.252227][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.262133][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.272553][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.282440][ T3960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.292880][ T3960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.303951][ T3960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.315920][ T3960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.324826][ T3960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.333629][ T3960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.342333][ T3960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.392682][ T4058] loop4: detected capacity change from 0 to 256 [ 44.434220][ T4058] ALSA: seq fatal error: cannot create timer (-22) [ 44.455454][ T4066] __nla_validate_parse: 1 callbacks suppressed [ 44.455466][ T4066] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.475111][ T4066] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.484206][ T4066] netlink: 332 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.512264][ T4072] loop3: detected capacity change from 0 to 512 [ 44.530007][ T4066] loop2: detected capacity change from 0 to 1024 [ 44.534212][ T4072] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 44.538080][ T4072] EXT4-fs: failed to create workqueue [ 44.539685][ T4066] EXT4-fs: quotafile must be on filesystem root [ 44.547573][ T4072] EXT4-fs (loop3): mount failed [ 44.679055][ T4061] chnl_net:caif_netlink_parms(): no params data found [ 44.691377][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888114e4d800: rx timeout, send abort [ 44.699682][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888114e4d600: rx timeout, send abort [ 44.707998][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888114e4d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.722383][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888114e4d600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.787094][ T4061] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.792574][ T4098] loop3: detected capacity change from 0 to 512 [ 44.794187][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.794453][ T4061] bridge_slave_0: entered allmulticast mode [ 44.814070][ T4061] bridge_slave_0: entered promiscuous mode [ 44.821032][ T4061] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.828173][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.835488][ T4061] bridge_slave_1: entered allmulticast mode [ 44.841875][ T4061] bridge_slave_1: entered promiscuous mode [ 44.852308][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.866628][ T4098] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.884536][ T4098] EXT4-fs: Cannot change journaled quota options when quota turned on [ 44.894913][ T4098] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #2: block 3: comm syz.3.180: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 44.895409][ T4061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.933864][ T4061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.951900][ T4117] loop1: detected capacity change from 0 to 1024 [ 44.959693][ T4061] team0: Port device team_slave_0 added [ 44.966886][ T4119] loop2: detected capacity change from 0 to 1024 [ 44.973512][ T4119] EXT4-fs: Ignoring removed orlov option [ 44.973899][ T4061] team0: Port device team_slave_1 added [ 44.979215][ T4119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.987774][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.997293][ T4117] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.018261][ T4119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.019929][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 45.019940][ T29] audit: type=1400 audit(1724149049.358:356): avc: denied { write } for pid=4122 comm="syz.3.185" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 45.030640][ T4117] JBD2: no valid journal superblock found [ 45.038811][ T29] audit: type=1400 audit(1724149049.378:357): avc: denied { read write } for pid=4118 comm="syz.2.184" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.059645][ T4117] EXT4-fs (loop1): Could not load journal inode [ 45.068237][ T4119] nfs: Unknown parameter '\^{+!^:/$++' [ 45.087859][ T29] audit: type=1400 audit(1724149049.378:358): avc: denied { open } for pid=4118 comm="syz.2.184" path="/4/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.090984][ T29] audit: type=1400 audit(1724149049.408:359): avc: denied { ioctl } for pid=4118 comm="syz.2.184" path="/4/file1/file1" dev="loop2" ino=15 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.095507][ T4061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.099994][ T29] audit: type=1400 audit(1724149049.408:360): avc: denied { mounton } for pid=4118 comm="syz.2.184" path="/4/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.122595][ T4061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.161743][ T29] audit: type=1400 audit(1724149049.488:361): avc: denied { setattr } for pid=4118 comm="syz.2.184" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.176640][ T4061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.242678][ T4061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.249692][ T4061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.252361][ T29] audit: type=1400 audit(1724149049.588:362): avc: denied { ioctl } for pid=4132 comm="syz.1.187" path="socket:[6749]" dev="sockfs" ino=6749 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.275666][ T4061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.312493][ T4136] program syz.3.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.333080][ T29] audit: type=1400 audit(1724149049.628:363): avc: denied { ioctl } for pid=4132 comm="syz.1.187" path="socket:[7208]" dev="sockfs" ino=7208 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.359867][ T3960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.369079][ T4136] loop3: detected capacity change from 0 to 512 [ 45.378029][ T4136] program syz.3.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.410752][ T4147] netlink: 52 bytes leftover after parsing attributes in process `syz.3.190'. [ 45.422346][ T4061] hsr_slave_0: entered promiscuous mode [ 45.429718][ T4061] hsr_slave_1: entered promiscuous mode [ 45.435778][ T4061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.443392][ T4061] Cannot create hsr debugfs directory [ 45.464901][ T4147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4147 comm=syz.3.190 [ 45.482531][ T4149] netlink: 'syz.3.190': attribute type 9 has an invalid length. [ 45.485882][ T4157] loop1: detected capacity change from 0 to 512 [ 45.502321][ T29] audit: type=1400 audit(1724149049.838:364): avc: denied { bind } for pid=4160 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.506486][ T4157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.534696][ T4157] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.548683][ T29] audit: type=1400 audit(1724149049.838:365): avc: denied { connect } for pid=4160 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.571391][ T4157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.572486][ T4167] loop3: detected capacity change from 0 to 128 [ 45.587240][ T4167] vfat: Unknown parameter '' [ 45.622115][ T4163] pim6reg: entered allmulticast mode [ 45.627248][ T4167] loop3: detected capacity change from 0 to 4096 [ 45.642777][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.645692][ T4061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.668543][ T4167] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.690589][ T4174] loop2: detected capacity change from 0 to 1024 [ 45.697304][ T4174] EXT4-fs: Invalid want_extra_isize 1 [ 45.723376][ T4177] loop3: detected capacity change from 0 to 2048 [ 45.732485][ T4179] netlink: 'syz.2.198': attribute type 74 has an invalid length. [ 45.741422][ T4061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.756824][ T4177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.771096][ T330] bridge_slave_1: left allmulticast mode [ 45.775450][ T4177] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.776832][ T330] bridge_slave_1: left promiscuous mode [ 45.794116][ T4177] EXT4-fs (loop3): Remounting filesystem read-only [ 45.797070][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.807189][ T4177] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.819300][ T4177] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.828433][ T330] bridge_slave_0: left allmulticast mode [ 45.834269][ T330] bridge_slave_0: left promiscuous mode [ 45.839892][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.916818][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.926946][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.936872][ T330] bond0 (unregistering): Released all slaves [ 45.948538][ T4061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.960146][ T4177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.197'. [ 45.976149][ T4177] syz.3.197 (4177) used greatest stack depth: 9384 bytes left [ 45.980591][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 45.994273][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 46.003097][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 46.012083][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 46.021062][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 46.029973][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 46.031238][ T4061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.039328][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 46.058332][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.067343][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.076281][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.085077][ T330] hsr_slave_0: left promiscuous mode [ 46.085082][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.099816][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.099851][ T330] hsr_slave_1: left promiscuous mode [ 46.108727][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.122827][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 46.122834][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.122859][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.131637][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.131659][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 46.164081][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.165485][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.172848][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.180256][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.196296][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 46.206361][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.206391][ T330] veth0_macvtap: left promiscuous mode [ 46.215150][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 46.220644][ T330] veth1_vlan: left promiscuous mode [ 46.230193][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.234663][ T330] veth0_vlan: left promiscuous mode [ 46.243370][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.257440][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 46.267535][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 46.276528][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 46.285410][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 46.294339][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 46.303245][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 46.312115][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=17 [ 46.323302][ T3585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=17 [ 46.341961][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.358977][ T330] pim6reg (unregistering): left allmulticast mode [ 46.418872][ T330] team0 (unregistering): Port device team_slave_1 removed [ 46.429704][ T330] team0 (unregistering): Port device team_slave_0 removed [ 46.490208][ T4197] loop3: detected capacity change from 0 to 256 [ 46.495833][ T4061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.506646][ T4061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.516251][ T4061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.525816][ T4061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.578180][ T4061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.603454][ T4061] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.614677][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.621747][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.641103][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.648190][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.690938][ T4061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.743066][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 46.790321][ T4061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.804818][ T4229] loop4: detected capacity change from 0 to 1024 [ 46.817867][ T4229] EXT4-fs: Ignoring removed nobh option [ 46.835620][ T4229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.905537][ T4061] veth0_vlan: entered promiscuous mode [ 46.917124][ T4061] veth1_vlan: entered promiscuous mode [ 46.936997][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.957573][ T4061] veth0_macvtap: entered promiscuous mode [ 46.964800][ T4061] veth1_macvtap: entered promiscuous mode [ 46.982764][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.993219][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.003079][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.013542][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.023451][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.033927][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.043820][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.054238][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.064043][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.074483][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.087476][ T4061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.095772][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.106267][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.116121][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.126571][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.136448][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.147004][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.157129][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.167725][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.177555][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.187979][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.202814][ T4061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.213277][ T4061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.215195][ T4253] loop1: detected capacity change from 0 to 1024 [ 47.222132][ T4061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.237156][ T4061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.241225][ T4253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.246076][ T4061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.280097][ T4253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.312610][ T4254] netlink: 92 bytes leftover after parsing attributes in process `syz.3.216'. [ 47.332103][ T4260] loop0: detected capacity change from 0 to 512 [ 47.349646][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.375580][ T4260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.375850][ T4268] x_tables: unsorted underflow at hook 2 [ 47.393579][ T4260] ext4 filesystem being mounted at /0/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.415962][ T4260] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.170: path /0/w5T)`)YFnA@T<3ڂ$rcnHwC" -8: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 47.460189][ T4268] xt_hashlimit: max too large, truncated to 1048576 [ 47.478054][ T4061] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.482803][ T4280] loop3: detected capacity change from 0 to 512 [ 47.496330][ T4280] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 47.927628][ T4298] loop4: detected capacity change from 0 to 512 [ 47.952282][ T4298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.973012][ T4298] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.012483][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.058349][ T4306] x_tables: duplicate underflow at hook 3 [ 48.067619][ T4307] netlink: 'syz.4.230': attribute type 10 has an invalid length. [ 48.076673][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.098826][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.119166][ T4307] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 48.532132][ T4339] loop3: detected capacity change from 0 to 512 [ 48.555263][ T4338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4338 comm=syz.1.239 [ 48.573954][ T4339] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 48.589256][ T4339] EXT4-fs (loop3): mount failed [ 49.073257][ T4347] loop4: detected capacity change from 0 to 1024 [ 49.082405][ T4347] EXT4-fs: Ignoring removed nobh option [ 49.088186][ T4347] EXT4-fs: Ignoring removed orlov option [ 49.116381][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.167246][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.413024][ T4378] loop3: detected capacity change from 0 to 512 [ 49.425193][ T4372] loop0: detected capacity change from 0 to 8192 [ 49.436472][ T4378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.449012][ T4378] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.474695][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.542155][ T4378] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.252: bg 0: block 344: padding at end of block bitmap is not set [ 49.556563][ T4378] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.252: Failed to acquire dquot type 1 [ 49.571649][ T4397] loop0: detected capacity change from 0 to 164 [ 49.580399][ T4397] Unable to read rock-ridge attributes [ 49.587411][ T4397] Unable to read rock-ridge attributes [ 49.601815][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.642467][ T4401] loop3: detected capacity change from 0 to 512 [ 49.655158][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.667770][ T4401] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.687677][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.855849][ T4410] loop3: detected capacity change from 0 to 512 [ 49.863699][ T4410] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.260: corrupted in-inode xattr: invalid ea_ino [ 49.879086][ T4410] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.260: couldn't read orphan inode 15 (err -117) [ 49.893874][ T4410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.954452][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.094857][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 50.094870][ T29] audit: type=1326 audit(1724149054.438:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9193a49e79 code=0x0 [ 50.148054][ T29] audit: type=1400 audit(1724149054.488:396): avc: denied { tracepoint } for pid=4425 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 50.196651][ T29] audit: type=1400 audit(1724149054.538:397): avc: denied { read } for pid=4431 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 50.224595][ T29] audit: type=1400 audit(1724149054.568:398): avc: denied { watch_reads } for pid=4434 comm="syz.4.267" path="/72" dev="tmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.259298][ T4438] loop1: detected capacity change from 0 to 512 [ 50.278700][ T4438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.292621][ T4438] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.293267][ T29] audit: type=1400 audit(1724149054.628:399): avc: denied { create } for pid=4441 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.323291][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.335556][ T29] audit: type=1400 audit(1724149054.668:400): avc: denied { bind } for pid=4441 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.362691][ T4447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=4447 comm=syz.1.271 [ 50.377349][ T4447] process 'syz.1.271' launched './file0' with NULL argv: empty string added [ 50.386900][ T29] audit: type=1400 audit(1724149054.728:401): avc: denied { execute_no_trans } for pid=4446 comm="syz.1.271" path="/41/file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.416741][ T29] audit: type=1400 audit(1724149054.758:402): avc: denied { unmount } for pid=4061 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.451622][ T4454] loop1: detected capacity change from 0 to 256 [ 50.452511][ T4450] loop3: detected capacity change from 0 to 8192 [ 50.458139][ T4454] vfat: Bad value for 'fmask' [ 50.490414][ T4454] loop1: detected capacity change from 0 to 512 [ 50.496822][ T4454] ext2: Unknown parameter 'subj_type' [ 50.513978][ T4450] loop3: p2 p4 [ 50.517503][ T4450] loop3: p2 start 4293394690 is beyond EOD, truncated [ 50.524320][ T4450] loop3: p4 size 50331648 extends beyond EOD, truncated [ 50.551016][ T29] audit: type=1400 audit(1724149054.888:403): avc: denied { relabelfrom } for pid=4459 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.568390][ T4462] syzkaller0: entered promiscuous mode [ 50.570685][ T29] audit: type=1400 audit(1724149054.888:404): avc: denied { relabelto } for pid=4459 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.576113][ T4462] syzkaller0: entered allmulticast mode [ 50.656269][ T4472] loop1: detected capacity change from 0 to 1024 [ 50.665198][ T4472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.740035][ T330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 50.754884][ T330] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.767223][ T330] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.767223][ T330] [ 50.777121][ T330] EXT4-fs (loop1): Total free blocks count 0 [ 50.783176][ T330] EXT4-fs (loop1): Free/Dirty block details [ 50.789180][ T330] EXT4-fs (loop1): free_blocks=68451041280 [ 50.795113][ T330] EXT4-fs (loop1): dirty_blocks=32 [ 50.800293][ T330] EXT4-fs (loop1): Block reservation details [ 50.806337][ T330] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 50.814519][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 50.837471][ T4477] loop0: detected capacity change from 0 to 2048 [ 50.867451][ T4480] loop1: detected capacity change from 0 to 1024 [ 50.874377][ T4477] loop0: p1 < > p4 [ 50.878547][ T4477] loop0: p4 size 8388608 extends beyond EOD, truncated [ 50.885153][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.926560][ T4484] loop0: detected capacity change from 0 to 512 [ 50.937443][ T3610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.948019][ T4484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.961723][ T4484] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.980486][ T4061] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.030663][ T4496] loop1: detected capacity change from 0 to 512 [ 51.035993][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 51.038369][ T4496] EXT4-fs: test_dummy_encryption option not supported [ 51.057410][ T4496] loop1: detected capacity change from 0 to 512 [ 51.064849][ T4496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.080744][ T4500] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.286: Unimplemented hash flags: 0x0001 [ 51.092304][ T4500] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.286: Corrupt directory, running e2fsck is recommended [ 51.109607][ T4496] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 51.139782][ T4502] pim6reg: entered allmulticast mode [ 51.269090][ T4536] loop1: detected capacity change from 0 to 512 [ 51.285116][ T4536] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.348575][ T4541] loop1: detected capacity change from 0 to 512 [ 51.358622][ T4541] loop1: detected capacity change from 0 to 128 [ 51.367266][ T4544] loop1: detected capacity change from 0 to 512 [ 51.376161][ T4544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.387042][ T4544] EXT4-fs (loop1): 1 truncate cleaned up [ 51.410704][ T4543] netlink: 'syz.1.299': attribute type 4 has an invalid length. [ 51.431097][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 51.440428][ T4543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'. [ 51.448247][ T4541] netlink: 'syz.1.299': attribute type 4 has an invalid length. [ 51.491030][ T4565] ieee802154 phy0 wpan0: encryption failed: -22 [ 51.537634][ T4563] sg_write: data in/out 42219/14 bytes for SCSI command 0x0-- guessing data in; [ 51.537634][ T4563] program syz.2.305 not setting count and/or reply_len properly [ 51.613192][ T4583] loop4: detected capacity change from 0 to 512 [ 51.630199][ T4586] netlink: 'syz.3.316': attribute type 22 has an invalid length. [ 51.651568][ T4583] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.670658][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.689691][ T4599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.318'. [ 51.741044][ T4583] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.314: bg 0: block 344: padding at end of block bitmap is not set [ 51.755593][ T4583] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.314: Failed to acquire dquot type 1 [ 51.855049][ T4615] loop4: detected capacity change from 0 to 8192 [ 51.863092][ T4621] netlink: 'syz.3.325': attribute type 27 has an invalid length. [ 51.985290][ T4650] loop3: detected capacity change from 0 to 512 [ 51.985944][ T4652] ipt_ECN: cannot use operation on non-tcp rule [ 52.001081][ T4652] hub 9-0:1.0: USB hub found [ 52.006248][ T4652] hub 9-0:1.0: 8 ports detected [ 52.013568][ T4650] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.099675][ T4668] loop4: detected capacity change from 0 to 8192 [ 52.142650][ T4672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.339'. [ 52.156228][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 52.158369][ T4672] ip6t_REJECT: ECHOREPLY is not supported [ 52.195558][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 52.197541][ T4687] loop0: detected capacity change from 0 to 1024 [ 52.207787][ T4688] bridge0: entered promiscuous mode [ 52.210958][ T4687] EXT4-fs: quotafile must be on filesystem root [ 52.220068][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 52.231470][ T4688] bridge0: left promiscuous mode [ 52.241778][ T4687] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 52.261265][ T4691] loop4: detected capacity change from 0 to 1024 [ 52.270266][ T4688] loop1: detected capacity change from 0 to 512 [ 52.282119][ T4688] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 16: comm syz.1.342: invalid block [ 52.282564][ T4687] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.293483][ T4688] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.342: couldn't read orphan inode 11 (err -117) [ 52.300818][ T4687] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 52.313067][ T4688] EXT4-fs (loop1): 1 truncate cleaned up [ 52.331792][ T4687] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 52.346865][ T4687] bond1 (unregistering): Released all slaves [ 52.359737][ T4697] loop4: detected capacity change from 0 to 512 [ 52.377332][ T4697] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.418672][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.346'. [ 52.431387][ T4704] ebt_among: src integrity fail: 100 [ 52.508898][ T4714] loop0: detected capacity change from 0 to 1024 [ 52.530313][ T4714] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.553358][ T4714] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 52.563965][ T4714] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.570540][ T4714] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Corrupt filesystem [ 52.585283][ T4714] EXT4-fs (loop0): Remounting filesystem read-only [ 52.608751][ T4714] EXT4-fs (loop0): 1 truncate cleaned up [ 52.620966][ T4731] loop2: detected capacity change from 0 to 1024 [ 52.632729][ T4714] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 52.642947][ T4731] EXT4-fs: Ignoring removed oldalloc option [ 52.651191][ T4731] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.767153][ T4745] loop4: detected capacity change from 0 to 512 [ 52.780852][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 52.806066][ T4745] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.937415][ T4753] netlink: 'syz.4.359': attribute type 13 has an invalid length. [ 52.959640][ T4753] netlink: 'syz.4.359': attribute type 2 has an invalid length. [ 52.967437][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 53.231861][ T4783] loop3: detected capacity change from 0 to 512 [ 53.258072][ T4783] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.269060][ T3326] IPVS: starting estimator thread 0... [ 53.363809][ T4789] IPVS: using max 2784 ests per chain, 139200 per kthread [ 53.558256][ T4817] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 53.566456][ T4817] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 53.614384][ T4827] loop4: detected capacity change from 0 to 512 [ 53.627141][ T4827] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.670701][ T4841] loop4: detected capacity change from 0 to 2048 [ 53.694308][ T4841] loop4: p1 < > p3 [ 53.698598][ T4841] loop4: p3 size 134217728 extends beyond EOD, truncated [ 53.737444][ T4847] loop0: detected capacity change from 0 to 1024 [ 53.744199][ T4847] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.802082][ T4860] syz.4.388[4860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.802146][ T4860] syz.4.388[4860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.817729][ T4870] syz.4.388[4870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.832467][ T4870] syz.4.388[4870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.839225][ T4873] loop0: detected capacity change from 0 to 512 [ 53.867051][ T4873] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.023237][ T4888] loop4: detected capacity change from 0 to 1764 [ 54.109527][ T4895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.126902][ T4894] ipt_REJECT: ECHOREPLY no longer supported. [ 54.133742][ T4895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.149937][ T4895] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 54.171484][ T4895] bond0 (unregistering): Released all slaves [ 54.264804][ T4912] loop3: detected capacity change from 0 to 512 [ 54.265452][ T4907] bond1: entered promiscuous mode [ 54.284680][ T4907] veth3: entered promiscuous mode [ 54.287739][ T4912] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.289945][ T4907] bond1: (slave veth3): Enslaving as an active interface with an up link [ 54.315623][ T4907] bond1 (unregistering): (slave veth3): Releasing backup interface [ 54.324285][ T4907] veth3: left promiscuous mode [ 54.330725][ T4907] bond1 (unregistering): Released all slaves [ 54.397167][ T4929] vlan2: entered promiscuous mode [ 54.402210][ T4929] vlan2: entered allmulticast mode [ 54.409101][ T4929] team0: Port device vlan2 added [ 54.429803][ T4936] pim6reg: entered allmulticast mode [ 54.820595][ T4952] loop0: detected capacity change from 0 to 1024 [ 54.827429][ T4952] EXT4-fs: Ignoring removed orlov option [ 54.833144][ T4952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.847036][ T4954] loop2: detected capacity change from 0 to 512 [ 54.867267][ T4954] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.881307][ T4960] bond1: entered promiscuous mode [ 54.892508][ T4960] gretap1: entered promiscuous mode [ 54.898240][ T4960] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.949887][ T330] ================================================================== [ 54.957965][ T330] BUG: KCSAN: data-race in __stop_tty / pty_write [ 54.964381][ T330] [ 54.966696][ T330] write to 0xffff88811465cdbc of 1 bytes by task 4966 on cpu 0: [ 54.974320][ T330] __stop_tty+0x42/0x90 [ 54.978487][ T330] n_tty_ioctl_helper+0x223/0x240 [ 54.983513][ T330] n_tty_ioctl+0xfd/0x200 [ 54.987852][ T330] tty_ioctl+0x886/0xbe0 [ 54.992098][ T330] __se_sys_ioctl+0xd3/0x150 [ 54.996694][ T330] __x64_sys_ioctl+0x43/0x50 [ 54.998322][ T4968] loop0: detected capacity change from 0 to 128 [ 55.001278][ T330] x64_sys_call+0x15cc/0x2d60 [ 55.001305][ T330] do_syscall_64+0xc9/0x1c0 [ 55.001330][ T330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.022570][ T330] [ 55.023116][ T4969] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 55.024878][ T330] read to 0xffff88811465cdbc of 1 bytes by task 330 on cpu 1: [ 55.024894][ T330] pty_write+0x26/0xa0 [ 55.032354][ T4969] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 55.039746][ T330] tty_put_char+0x8d/0xc0 [ 55.057738][ T330] __process_echoes+0x393/0x6b0 [ 55.062582][ T330] n_tty_receive_buf_common+0x8f9/0xbe0 [ 55.068121][ T330] n_tty_receive_buf2+0x33/0x40 [ 55.072953][ T330] tty_ldisc_receive_buf+0x63/0x100 [ 55.078131][ T330] tty_port_default_receive_buf+0x59/0x90 [ 55.083834][ T330] flush_to_ldisc+0x1ce/0x410 [ 55.088505][ T330] process_scheduled_works+0x483/0x9a0 [ 55.093948][ T330] worker_thread+0x526/0x700 [ 55.098540][ T330] kthread+0x1d1/0x210 [ 55.102592][ T330] ret_from_fork+0x4b/0x60 [ 55.107011][ T330] ret_from_fork_asm+0x1a/0x30 [ 55.111758][ T330] [ 55.114065][ T330] value changed: 0x00 -> 0x01 [ 55.118713][ T330] [ 55.121020][ T330] Reported by Kernel Concurrency Sanitizer on: [ 55.127169][ T330] CPU: 1 UID: 0 PID: 330 Comm: kworker/u8:5 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 55.137917][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.147965][ T330] Workqueue: events_unbound flush_to_ldisc [ 55.153771][ T330] ==================================================================