last executing test programs: 2.360449237s ago: executing program 1 (id=150): syz_read_part_table(0x637, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) syz_emit_ethernet(0x60, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{}]}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x3, [0x0, 0x0, 0x0]}, 0xe) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.305372781s ago: executing program 4 (id=154): io_uring_setup(0x3b7a, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080630172a855de972d8e0f57e7b1d4e9439a1dca00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6c, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffbfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x3) connect$caif(r5, &(0x7f0000000040)=@rfm={0x25, 0x0, "a41badc9b7ee924ad89eae26cb3d5dbc"}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x101000) write$cgroup_subtree(r4, 0x0, 0xfe15) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x10d, 0xf0, 0x0, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x4, 0x40, r4, 0x6, '\x00', 0x0, r0, 0x1, 0x3, 0x1, 0xc}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000e5000085000000860000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000004850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 1.864480487s ago: executing program 4 (id=156): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=@getchain={0x24, 0x66, 0xaa733c0199a015cd, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1}}}, 0x24}}, 0x0) 1.82562991s ago: executing program 3 (id=157): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x600}}}}}}, 0x0) 1.807188982s ago: executing program 4 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x58}}, 0x0) r1 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={r1, 0xd, 0x3c}, &(0x7f0000000340)={'enc=', 'pkcs1', ' hash=', {'blake2b-512-generic\x00'}}, &(0x7f00000003c0)="51ecbfb3591e99f85a279db24b", &(0x7f0000000400)=""/60) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@union={0x3}, @datasec={0x0, 0x0, 0x0, 0xf, 0xffffffffffffffa9, [], "1a85a3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '['}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x3e]}}, 0x0, 0x47}, 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f0000000a00)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) ftruncate(r2, 0x7fff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000340)=0x1c, 0x4) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4600030007"], 0xd) open$dir(&(0x7f0000000440)='./bus\x00', 0x0, 0xc2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0xd, 0x8, 0xfffffff7, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x4, 0x782}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='uni_xlate=1,s\b\x00\x00\x00name=lower,utf8=0,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,dmask=00000000000000000000005,shortname=mixed,rodir,shortname=mixed,rodir,\x00'], 0xfe, 0x267, &(0x7f0000000740)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r8, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e23, 0x7fff, @loopback, 0xad5}}}, 0x118) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000580)={{}, 0x1}) 1.722529789s ago: executing program 0 (id=161): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000f40)='./file1\x00', 0x8041, &(0x7f0000001000)={[{@stripe={'stripe', 0x3d, 0xa}}, {@grpjquota}, {@oldalloc}, {@noquota}, {@grpjquota}, {@block_validity}, {@abort}, {@minixdf}, {@auto_da_alloc}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d00000005002e00000000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="08002f000000000005002b"], 0x40}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000001000)="06", 0x1, 0x551d05354e5f6353, &(0x7f0000001040)={0xa, 0x0, 0x7f, @local, 0x7}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 1.694098131s ago: executing program 3 (id=162): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)) syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/pid\x00') (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x150, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0xfffffffffffffd29, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc9480715edfd2343d44d97ed1fa25a3d186f098d804cf4ecb9694c01ad47bf6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x150}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x20044000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f00000000c0)={[{@nouid32}, {@quota}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsv1}], [{@subj_user}, {@dont_appraise}, {@seclabel}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") 1.520478805s ago: executing program 2 (id=163): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x35}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x20}, 0x0) 1.511108176s ago: executing program 3 (id=164): socket(0x10, 0x6, 0x6) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = socket(0x11, 0x3, 0x0) getsockopt(r0, 0x1, 0x4, &(0x7f0000002840)=""/186, &(0x7f0000000200)=0xba) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000280012800b00010067656e657665000018000280140007000000000000000005000000000000000108000a00", @ANYRES32=r3, @ANYBLOB="9d0956888cb445b5352cad4fc2020d493168a1f5a9a1d657b1901fdd486031e731f8ece26bd5662fff5243ffe5f61537deba1f977dc968e55413a3d7e87379403a7276783156dd3aa2bfb467d51b6ab39cb9b5bd96d9da"], 0x50}}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.506179416s ago: executing program 2 (id=165): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x201, 0x40406, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x2000000, 0x0, 0x0}) 1.396693335s ago: executing program 2 (id=166): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x8000}) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1.367913858s ago: executing program 1 (id=167): socketpair(0x9, 0x806, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x4]}, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0x1d8, 0x0, 0x338, 0x0, 0xd0, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast1, @empty, [0x0, 0x0, 0xffffff00]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) 1.33997355s ago: executing program 0 (id=168): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @broadcast, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_NH_ID={0x8, 0x1e, 0x4e}]}, 0x2c}}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x18, 0x0, 0x0, @prog_fd=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x97, 0x1900, 0x1, 0x1, '\x00', r5, r6, 0x3, 0x0, 0x3, 0x4}, 0x48) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x8, r8, 0x0, 0x0, 0x1}}, 0x20) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1.304457183s ago: executing program 1 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = eventfd2(0x0, 0x0) r2 = syz_io_uring_setup(0x24f9, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e6, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000060001000000000000000000080001000000000008000500000000003261f558b4d0c5fedadb60801a61578a0d56246557b864bb3b8ad9a30c3925e3e75d5bb53925837e367e233e8cdcb33e4519e38571aaa80000839ad877564ce02be49ce936ef60c23d60a9b2b0d736e50b0527f99e23375a223d71fc98"], 0x20}}, 0x0) (async) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x1c) (async) sendto$inet6(r7, &(0x7f0000000580)="7d58132db0107e8677959360c8ee7d1ec14abe4362abb03f471f71a9d2db44339dfea06aa17cadaebabebff8019705d572ca4ec078e35e6025635c590700fdb5467310f2ad6e55f1f6ec5c5f4985f106d7750293a0b9648baadc96dfbb80bf54378e1e5cdf8433db5cd3820574e6afea049ca063e12283bef125d1c7290d1ca0a7d5786e4818f5e5f34e2befd786f9bb86bd831a863a5c361f13090a7cff2e29f56d4a12658d5b3d71e1ba04e9937cd41c7e9c0ddf15a42c8ae70f415a36585bad9484444b3906d1b3b61a340347fc50fc08", 0xd2, 0x101, &(0x7f0000000240)={0xa, 0x4e23, 0x7ffffffd, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x1}, 0x8) (async) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept4$unix(r6, 0x0, 0x0, 0x0) sendmsg$unix(r9, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x4000010) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="1f49b320ce08a98e", 0x8}], 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000000301010400000000000000000000000208000740000000054400068014000500200100000000000000000000000000022c000380060001004e230000060002004e240000060002004e2100000600020000040000060002004e2100000c000d80080001000000000008001640ffff00000c000680080025007f00000170000e8006000340000200000c00028005000100060000002c00018014000300fc01000000000000000000000000000114000400000000000000000000000000000000002c00018014000300fc00000000000000000000000000000114000400fc020000000000000000000000000001"], 0xf0}, 0x1, 0x0, 0x0, 0xc852}, 0x800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) (async, rerun: 64) r10 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001200010a00000000e5000000000a02000004000080"], 0x18}}, 0x0) 1.304143363s ago: executing program 4 (id=170): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000580)='net/igmp6\x00') ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000000001010400000000ffffff8802000000240001801400018008000100ac1e000108000200ac1414bb0c0002800400010000000000240002801400018008000100ac1efaacb999613a3c0414000c0002800500010000ffffffffffffffff000000200006800c000380060001000000000008000200ac1414aa08000100ac1e0001"], 0x84}, 0x1, 0x600000000000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380), 0x1, 0x54f, &(0x7f0000000b00)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) 1.303967513s ago: executing program 3 (id=171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) fchown(0xffffffffffffffff, 0x0, 0xee01) chdir(0x0) open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) 1.253903937s ago: executing program 0 (id=172): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)={0x10000000}) mkdir(0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000580)={0x9c9, 0x3f, 0x0, 0xfffe, 0x8, "15f27cbc4b6a270f"}) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000500)='./file0\x00', 0x0) setuid(0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0x0, 0x8000000], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.198465462s ago: executing program 1 (id=173): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setrlimit(0x0, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x30}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000180)={@multicast1, @loopback, 0x0, "f42711aea97a9d07767dc5b1ff7cb09b7197654bae5e81c9730002ccb8a9357b", 0xae, 0x9844, 0x8, 0x85f7}, 0x3c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d0400000000fbdbdf250400000008000100", @ANYRES32, @ANYBLOB="05000a0000", @ANYRES32], 0x5c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='5'], 0x118) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001100030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000ea04a708001c00", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'dvmrp1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r12 = open(&(0x7f0000000480)='./bus\x00', 0xe0101, 0x0) pwrite64(r12, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) r13 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0xae) fallocate(r13, 0x3, 0x2200, 0x4010000bffe) socket$phonet_pipe(0x23, 0x5, 0x2) 1.135771247s ago: executing program 0 (id=174): socket$inet(0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06200000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.128717857s ago: executing program 3 (id=175): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) syz_emit_ethernet(0x7e, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x14e, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'veth1_vlan\x00', 'macvtap0\x00', 'veth0_to_bridge\x00', 'pimreg\x00', @remote, [], @empty, [], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x0, "adc726b7bc14c981b80a363eb2f9fbe3210c6d6de0c500264a312f0b9117"}}}}]}, {0x0, '\x00', 0x2}]}, 0x1c6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x62841, 0x0) write$P9_RSTATu(r6, &(0x7f0000000f40)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x58) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) (async) chdir(&(0x7f0000000140)='./file0\x00') r7 = socket(0xa, 0x2400000001, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, 0x0, 0x8, 0xa03, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x44}}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41}, 0x36) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000480)={0x45, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 32) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 1.050976723s ago: executing program 3 (id=176): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f00000006c0)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@jqfmt_vfsv0}, {@discard}, {@data_err_abort}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x820074, &(0x7f00000002c0)={[{@barrier}, {@grpid}, {@nojournal_checksum}]}, 0x1, 0x511, &(0x7f0000001600)="$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") r1 = creat(&(0x7f0000000140)='./file1\x00', 0x48) fallocate(r1, 0x0, 0x1000000, 0x1000f4) ioprio_set$pid(0x1, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000008c0)=0x1, 0x4) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x1}], 0x1, 0x0, 0x0, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000050038000b80340001800a0001006c696d6974000000240002800c00014000000000000000050c000240000000000000000008000540000000030900010073797a30"], 0xf8}}, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) chdir(&(0x7f0000000380)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r7 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r7, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = dup3(r6, r7, 0x0) fchdir(r8) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='.\x00', 0x140002d2) close_range(r5, 0xffffffffffffffff, 0x0) getdents(r4, 0x0, 0x0) 1.050265634s ago: executing program 4 (id=177): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@sysvgroups}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x1000000601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf6}}], [{@seclabel}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0xc0189436, &(0x7f0000001940)) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 907.318535ms ago: executing program 0 (id=178): syz_read_part_table(0x637, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) syz_emit_ethernet(0x60, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{}]}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x3, [0x0, 0x0, 0x0]}, 0xe) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 583.615132ms ago: executing program 2 (id=179): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = dup2(r0, r1) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x500, &(0x7f0000000400)=[{&(0x7f0000000a00)="316f82faff29f96a2093a917017b4cd30000020000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000180)="0036d551863e1902129da79fb0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee500"/190, 0xbe}, {&(0x7f0000000c40)="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", 0x14b}], 0x3}}], 0x1, 0x0) 571.750043ms ago: executing program 4 (id=180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ab00000097000000fcffffff250000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfdef) getpid() sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) r1 = semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f0000000000)=[{0x3, 0x100}], 0x1) semop(0x0, &(0x7f0000000a00)=[{0x3}], 0x1) semctl$IPC_RMID(r1, 0x0, 0xe000000) 392.541178ms ago: executing program 2 (id=181): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x0, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bind$tipc(r1, 0x0, 0x0) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r3, 0xfdd1df4705532f1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 386.389118ms ago: executing program 2 (id=182): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (fail_nth: 4) 371.637779ms ago: executing program 1 (id=183): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @broadcast, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_NH_ID={0x8, 0x1e, 0x4e}]}, 0x2c}}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x18, 0x0, 0x0, @prog_fd=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x97, 0x1900, 0x1, 0x1, '\x00', r5, r6, 0x3, 0x0, 0x3, 0x4}, 0x48) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x8, r8, 0x0, 0x0, 0x1}}, 0x20) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 336.797162ms ago: executing program 0 (id=184): ioperm(0x0, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15}, {0x4}, {0x6}]}) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x21, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000280)=0x0) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000080)='&$^^\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd_index=0x2, 0x0, 0x0, 0x10001, 0x4, 0x1}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 0s ago: executing program 1 (id=185): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) fchown(0xffffffffffffffff, 0x0, 0xee01) chdir(0x0) open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) kernel console output (not intermixed with test programs): [ 21.569720][ T29] audit: type=1400 audit(1722434209.321:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 25.679816][ T29] audit: type=1400 audit(1722434213.431:82): avc: denied { mounton } for pid=3243 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.680621][ T3243] cgroup: Unknown subsys name 'net' [ 25.703243][ T29] audit: type=1400 audit(1722434213.431:83): avc: denied { mount } for pid=3243 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.731168][ T29] audit: type=1400 audit(1722434213.491:84): avc: denied { unmount } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.835302][ T3243] cgroup: Unknown subsys name 'rlimit' [ 25.958503][ T29] audit: type=1400 audit(1722434213.711:85): avc: denied { setattr } for pid=3243 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.983755][ T29] audit: type=1400 audit(1722434213.711:86): avc: denied { create } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.999665][ T3249] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.004788][ T29] audit: type=1400 audit(1722434213.711:87): avc: denied { write } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.034024][ T29] audit: type=1400 audit(1722434213.711:88): avc: denied { read } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.039121][ T3243] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.054449][ T29] audit: type=1400 audit(1722434213.721:89): avc: denied { mounton } for pid=3243 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.088695][ T29] audit: type=1400 audit(1722434213.721:90): avc: denied { mount } for pid=3243 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.112271][ T29] audit: type=1400 audit(1722434213.771:91): avc: denied { relabelto } for pid=3249 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.819584][ C0] eth0: bad gso: type: 1, size: 1408 [ 26.825947][ C0] eth0: bad gso: type: 1, size: 1408 [ 26.832360][ C0] eth0: bad gso: type: 1, size: 1408 [ 27.031609][ T3256] chnl_net:caif_netlink_parms(): no params data found [ 27.054945][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 27.183859][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.191849][ T3256] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.200673][ T3256] bridge_slave_0: entered allmulticast mode [ 27.207811][ T3256] bridge_slave_0: entered promiscuous mode [ 27.224602][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.232452][ T3256] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.240721][ T3256] bridge_slave_1: entered allmulticast mode [ 27.247525][ T3256] bridge_slave_1: entered promiscuous mode [ 27.284276][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.291631][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.303941][ T3258] bridge_slave_0: entered allmulticast mode [ 27.310719][ T3258] bridge_slave_0: entered promiscuous mode [ 27.318504][ T3256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.329190][ T3256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.345774][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.353207][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.360551][ T3258] bridge_slave_1: entered allmulticast mode [ 27.367628][ T3258] bridge_slave_1: entered promiscuous mode [ 27.388788][ T3256] team0: Port device team_slave_0 added [ 27.414464][ T3256] team0: Port device team_slave_1 added [ 27.428221][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.440740][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.476041][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.483109][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.510567][ T3256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.522132][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.529293][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.556263][ T3256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.579018][ T3258] team0: Port device team_slave_0 added [ 27.587222][ T3258] team0: Port device team_slave_1 added [ 27.626821][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.634162][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.660751][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.693127][ T3256] hsr_slave_0: entered promiscuous mode [ 27.699299][ T3256] hsr_slave_1: entered promiscuous mode [ 27.706154][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.713253][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.739503][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.788977][ T3258] hsr_slave_0: entered promiscuous mode [ 27.795042][ T3258] hsr_slave_1: entered promiscuous mode [ 27.800934][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.808533][ T3258] Cannot create hsr debugfs directory [ 27.816163][ T3278] chnl_net:caif_netlink_parms(): no params data found [ 27.893566][ T3279] chnl_net:caif_netlink_parms(): no params data found [ 27.949283][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.956664][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.964161][ T3278] bridge_slave_0: entered allmulticast mode [ 27.970817][ T3278] bridge_slave_0: entered promiscuous mode [ 27.981809][ T3281] chnl_net:caif_netlink_parms(): no params data found [ 27.994526][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.001598][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.008838][ T3278] bridge_slave_1: entered allmulticast mode [ 28.015267][ T3278] bridge_slave_1: entered promiscuous mode [ 28.056192][ T3278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.072005][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.079145][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.086361][ T3279] bridge_slave_0: entered allmulticast mode [ 28.093269][ T3279] bridge_slave_0: entered promiscuous mode [ 28.101693][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.108976][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.116228][ T3279] bridge_slave_1: entered allmulticast mode [ 28.122668][ T3279] bridge_slave_1: entered promiscuous mode [ 28.134730][ T3278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.168972][ T3256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.200814][ T3256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.212481][ T3279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.227167][ T3278] team0: Port device team_slave_0 added [ 28.236262][ T3256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.250109][ T3279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.267469][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.274716][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.282022][ T3281] bridge_slave_0: entered allmulticast mode [ 28.288569][ T3281] bridge_slave_0: entered promiscuous mode [ 28.295750][ T3278] team0: Port device team_slave_1 added [ 28.301532][ T3256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.322783][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.330067][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.337747][ T3281] bridge_slave_1: entered allmulticast mode [ 28.344589][ T3281] bridge_slave_1: entered promiscuous mode [ 28.361351][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.368435][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.394607][ T3278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.408785][ T3279] team0: Port device team_slave_0 added [ 28.426163][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.433393][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.460666][ T3278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.472671][ T3279] team0: Port device team_slave_1 added [ 28.485251][ T3281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.497276][ T3258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.506211][ T3258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.520817][ T3281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.540469][ T3258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.549468][ T3279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.556540][ T3279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.582595][ T3279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.594515][ T3279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.601474][ T3279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.627393][ T3279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.640173][ T3281] team0: Port device team_slave_0 added [ 28.645976][ T3258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.669486][ T3278] hsr_slave_0: entered promiscuous mode [ 28.676008][ T3278] hsr_slave_1: entered promiscuous mode [ 28.682249][ T3278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.689899][ T3278] Cannot create hsr debugfs directory [ 28.696118][ T3281] team0: Port device team_slave_1 added [ 28.714633][ T3281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.721608][ T3281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.747790][ T3281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.778118][ T3281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.785215][ T3281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.811441][ T3281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.826561][ T3279] hsr_slave_0: entered promiscuous mode [ 28.832660][ T3279] hsr_slave_1: entered promiscuous mode [ 28.838975][ T3279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.846939][ T3279] Cannot create hsr debugfs directory [ 28.886344][ T3281] hsr_slave_0: entered promiscuous mode [ 28.892354][ T3281] hsr_slave_1: entered promiscuous mode [ 28.898626][ T3281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.906374][ T3281] Cannot create hsr debugfs directory [ 29.066597][ T3256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.077543][ T3278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.088361][ T3278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.097192][ T3278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.106402][ T3278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.133877][ T3256] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.147306][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.157901][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.165172][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.175520][ T3281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.185675][ T3281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.208405][ T3281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.217802][ T3281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.231677][ T3279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.240200][ T3279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.249524][ T3279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.258237][ T3279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.268378][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.275673][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.302981][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.318062][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.325359][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.346199][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.353320][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.407912][ T3258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.418420][ T3258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.471716][ T3278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.500208][ T3256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.511240][ T3281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.525412][ T3279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.542329][ T3281] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.568496][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.577899][ T3278] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.586472][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.593919][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.602984][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.610828][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.621068][ T3279] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.637233][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.644942][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.659342][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.666967][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.691598][ T3279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.702301][ T3279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.724522][ T3281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.735186][ T3281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.748902][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.756347][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.787278][ T3256] veth0_vlan: entered promiscuous mode [ 29.796474][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.803586][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.863945][ T3256] veth1_vlan: entered promiscuous mode [ 29.870246][ T3278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.880861][ T3278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.942720][ T3258] veth0_vlan: entered promiscuous mode [ 29.952283][ T3258] veth1_vlan: entered promiscuous mode [ 29.969853][ T3281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.981667][ T3256] veth0_macvtap: entered promiscuous mode [ 29.998610][ T3258] veth0_macvtap: entered promiscuous mode [ 30.007312][ T3279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.017061][ T3256] veth1_macvtap: entered promiscuous mode [ 30.031605][ T3258] veth1_macvtap: entered promiscuous mode [ 30.057668][ T3278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.070896][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.090192][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.105051][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.115840][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.128001][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.137032][ T3258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.146395][ T3258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.155245][ T3258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.164319][ T3258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.177397][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.188260][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.199307][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.216626][ T3256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.225763][ T3256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.234738][ T3256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.243956][ T3256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.309116][ T3281] veth0_vlan: entered promiscuous mode [ 30.340940][ T3281] veth1_vlan: entered promiscuous mode [ 30.361216][ T3278] veth0_vlan: entered promiscuous mode [ 30.374907][ T3278] veth1_vlan: entered promiscuous mode [ 30.388852][ T3281] veth0_macvtap: entered promiscuous mode [ 30.405817][ T3279] veth0_vlan: entered promiscuous mode [ 30.429321][ T3281] veth1_macvtap: entered promiscuous mode [ 30.446118][ T3279] veth1_vlan: entered promiscuous mode [ 30.460235][ T3281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.470842][ T3281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.480888][ T3281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.491531][ T3281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.502281][ T3281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.512613][ T3278] veth0_macvtap: entered promiscuous mode [ 30.524651][ T3278] veth1_macvtap: entered promiscuous mode [ 30.537459][ T3398] pim6reg1: entered promiscuous mode [ 30.542843][ T3398] pim6reg1: entered allmulticast mode [ 30.551223][ T3281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.561986][ T3281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.571894][ T3281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.582419][ T3281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.594367][ T3281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.603265][ T3281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.612054][ T3281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.620849][ T3281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.629620][ T3281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.651511][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 30.675063][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 30.717058][ T3279] veth0_macvtap: entered promiscuous mode [ 30.726022][ T3279] veth1_macvtap: entered promiscuous mode [ 30.736767][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.747271][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.757136][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.767765][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.778027][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.788500][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.799557][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.817928][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.828605][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.838667][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.849311][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.859158][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.869605][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.879481][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.890009][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.901132][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.912329][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 30.912346][ T29] audit: type=1400 audit(1722434218.661:134): avc: denied { read } for pid=3408 comm="syz.1.7" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.913002][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.918658][ T29] audit: type=1400 audit(1722434218.661:135): avc: denied { open } for pid=3408 comm="syz.1.7" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.942032][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.942045][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.996856][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.006774][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.017225][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.030571][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.039490][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.048448][ T3417] loop1: detected capacity change from 0 to 512 [ 31.050103][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.066115][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.066341][ T3417] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.076568][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.092922][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.103547][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.113566][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.124230][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.129281][ T3417] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.147260][ T3417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.148624][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.174644][ T3417] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.9: corrupted in-inode xattr: e_value out of bounds [ 31.175717][ T3279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.197147][ T3279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.205931][ T3279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.214275][ T3417] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9: couldn't read orphan inode 15 (err -117) [ 31.214680][ T3279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.228959][ T3417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.251011][ T3278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.254867][ T29] audit: type=1400 audit(1722434219.011:136): avc: denied { mount } for pid=3416 comm="syz.1.9" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.259792][ T3278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.289943][ T3278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.298810][ T3278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.302454][ T29] audit: type=1400 audit(1722434219.041:137): avc: denied { write } for pid=3416 comm="syz.1.9" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.329434][ T29] audit: type=1400 audit(1722434219.041:138): avc: denied { add_name } for pid=3416 comm="syz.1.9" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.349951][ T29] audit: type=1400 audit(1722434219.041:139): avc: denied { create } for pid=3416 comm="syz.1.9" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.370313][ T29] audit: type=1400 audit(1722434219.041:140): avc: denied { write open } for pid=3416 comm="syz.1.9" path="/3/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.393087][ T29] audit: type=1400 audit(1722434219.051:141): avc: denied { create } for pid=3416 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.412727][ T29] audit: type=1400 audit(1722434219.051:142): avc: denied { getopt } for pid=3416 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.431979][ T29] audit: type=1400 audit(1722434219.051:143): avc: denied { connect } for pid=3416 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.543514][ T3433] loop3: detected capacity change from 0 to 512 [ 31.557640][ T3433] ======================================================= [ 31.557640][ T3433] WARNING: The mand mount option has been deprecated and [ 31.557640][ T3433] and is ignored by this kernel. Remove the mand [ 31.557640][ T3433] option from the mount to silence this warning. [ 31.557640][ T3433] ======================================================= [ 31.604468][ T3436] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 31.604468][ T3436] program syz.4.11 not setting count and/or reply_len properly [ 31.627794][ T3433] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.4: invalid block [ 31.650004][ T3433] EXT4-fs (loop3): Remounting filesystem read-only [ 31.659494][ T3433] EXT4-fs (loop3): 2 truncates cleaned up [ 31.673618][ T3433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.693257][ T3433] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 31.700688][ T3433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.774887][ T3443] loop4: detected capacity change from 0 to 512 [ 31.789467][ T3444] loop3: detected capacity change from 0 to 1024 [ 31.800119][ T3443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.827520][ T3444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.844006][ T3443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.861397][ T3443] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.873340][ T3444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.888754][ T3444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1301 sclass=netlink_route_socket pid=3444 comm=syz.3.14 [ 31.892735][ T3443] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 31.944613][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.945122][ T3444] loop3: detected capacity change from 0 to 8192 [ 31.969375][ T3450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 31.995295][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.021474][ T3454] loop4: detected capacity change from 0 to 128 [ 32.028646][ T3454] vfat: Unknown parameter 'íCô*' [ 32.037922][ T3454] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17'. [ 32.047383][ T3444] loop3: detected capacity change from 0 to 2048 [ 32.056904][ T3454] tmpfs: Bad value for 'mpol' [ 32.068208][ T3444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.086737][ T3454] syz.4.17 (3454) used greatest stack depth: 10936 bytes left [ 32.096337][ T3444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.199839][ T3464] loop4: detected capacity change from 0 to 512 [ 32.223083][ T3464] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 32.236990][ T3464] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.249249][ T3464] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 32.276766][ T3464] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 32.277128][ T3471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.292937][ T3464] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2978: inode #16: comm syz.4.20: corrupted xattr block 31: invalid header [ 32.329228][ T3464] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 32.346804][ T3464] EXT4-fs (loop4): 1 orphan inode deleted [ 32.352942][ T3464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.389853][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.512094][ T3489] mmap: syz.4.25 (3489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.514825][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 32.542221][ T3492] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 32.573751][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 32.670924][ T3402] syz.0.6 (3402) used greatest stack depth: 10760 bytes left [ 32.692720][ T3502] Zero length message leads to an empty skb [ 32.696483][ T3504] loop1: detected capacity change from 0 to 512 [ 32.729849][ T3504] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 32.760917][ T3504] EXT4-fs (loop1): Remounting filesystem read-only [ 32.787974][ T3504] EXT4-fs (loop1): 1 truncate cleaned up [ 32.818419][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.848842][ T3504] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 32.856190][ T3504] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.859654][ T3523] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 32.859654][ T3523] program syz.4.39 not setting count and/or reply_len properly [ 32.916652][ T3524] modprobe (3524) used greatest stack depth: 10432 bytes left [ 32.942087][ T3527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.989948][ T3520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 33.000195][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 33.009642][ T3536] capability: warning: `syz.4.42' uses deprecated v2 capabilities in a way that may be insecure [ 33.048833][ T3520] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 33.164967][ T3545] loop1: detected capacity change from 0 to 1024 [ 33.188509][ T3556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.200675][ T3545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.215874][ T3551] usb usb9: usbfs: process 3551 (syz.4.48) did not claim interface 0 before use [ 33.242665][ T3545] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3545 comm=syz.1.47 [ 33.429603][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.525226][ T3567] netlink: 116 bytes leftover after parsing attributes in process `syz.4.53'. [ 33.556333][ T3569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.54'. [ 33.616608][ T3571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=3571 comm=syz.1.51 [ 33.631352][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 33.660482][ T3580] loop4: detected capacity change from 0 to 128 [ 33.685902][ T3586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.698144][ T3586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.759733][ T3588] loop1: detected capacity change from 0 to 512 [ 33.766413][ T3588] EXT4-fs: Ignoring removed i_version option [ 33.772474][ T3588] EXT4-fs: Ignoring removed nobh option [ 33.778768][ T3588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.790209][ T3588] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.803934][ T3588] EXT4-fs (loop1): 1 truncate cleaned up [ 33.810069][ T3588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.852472][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.874592][ T3595] loop1: detected capacity change from 0 to 1024 [ 33.885304][ T3595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.901549][ T3595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3595 comm=syz.1.61 [ 33.926562][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.982469][ T3604] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 34.255863][ T3626] FAULT_INJECTION: forcing a failure. [ 34.255863][ T3626] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.269211][ T3626] CPU: 0 UID: 0 PID: 3626 Comm: syz.1.70 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 34.279813][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.289934][ T3626] Call Trace: [ 34.293223][ T3626] [ 34.296196][ T3626] dump_stack_lvl+0xf2/0x150 [ 34.300839][ T3626] dump_stack+0x15/0x20 [ 34.305050][ T3626] should_fail_ex+0x229/0x230 [ 34.309777][ T3626] should_fail_alloc_page+0xfd/0x110 [ 34.315272][ T3626] __alloc_pages_noprof+0x109/0x360 [ 34.320528][ T3626] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 34.325939][ T3626] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 34.331330][ T3626] handle_mm_fault+0xd6d/0x2940 [ 34.336223][ T3626] ? mas_walk+0x204/0x320 [ 34.340664][ T3626] exc_page_fault+0x3b9/0x650 [ 34.345387][ T3626] asm_exc_page_fault+0x26/0x30 [ 34.350279][ T3626] RIP: 0033:0x7fc702ebbb63 [ 34.354804][ T3626] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 34.374678][ T3626] RSP: 002b:00007fc701c764b0 EFLAGS: 00010206 [ 34.380770][ T3626] RAX: 000000000000d000 RBX: 00007fc701c76550 RCX: 00007fc6f9857000 [ 34.388752][ T3626] RDX: 00007fc701c766f0 RSI: 000000000000006d RDI: 00007fc701c765f0 [ 34.396733][ T3626] RBP: 0000000000000051 R08: 0000000000000008 R09: 00000000000000a3 [ 34.404839][ T3626] R10: 00000000000000c6 R11: 00007fc701c76550 R12: 0000000000000001 [ 34.412877][ T3626] R13: 00007fc703077440 R14: 000000000000000c R15: 00007fc701c765f0 [ 34.420879][ T3626] [ 34.424326][ T3626] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 34.434593][ T3626] loop1: detected capacity change from 0 to 512 [ 34.442046][ T3626] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.454753][ T3626] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.70: iget: bad i_size value: -6917529027641081756 [ 34.463156][ C0] hrtimer: interrupt took 41234 ns [ 34.469849][ T3626] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.70: couldn't read orphan inode 17 (err -117) [ 34.486888][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.551809][ T3634] FAULT_INJECTION: forcing a failure. [ 34.551809][ T3634] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.565434][ T3634] CPU: 0 UID: 0 PID: 3634 Comm: syz.2.72 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 34.576045][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.586116][ T3634] Call Trace: [ 34.589409][ T3634] [ 34.592392][ T3634] dump_stack_lvl+0xf2/0x150 [ 34.597025][ T3634] dump_stack+0x15/0x20 [ 34.601275][ T3634] should_fail_ex+0x229/0x230 [ 34.606005][ T3634] should_fail+0xb/0x10 [ 34.610208][ T3634] should_fail_usercopy+0x1a/0x20 [ 34.615281][ T3634] _copy_to_user+0x1e/0xa0 [ 34.619858][ T3634] simple_read_from_buffer+0xa0/0x110 [ 34.625273][ T3634] proc_fail_nth_read+0xfc/0x140 [ 34.630271][ T3634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 34.635931][ T3634] vfs_read+0x1a2/0x6e0 [ 34.640126][ T3634] ? __rcu_read_unlock+0x4e/0x70 [ 34.645096][ T3634] ? __fget_files+0x1da/0x210 [ 34.649875][ T3634] ksys_read+0xeb/0x1b0 [ 34.654177][ T3634] __x64_sys_read+0x42/0x50 [ 34.658692][ T3634] x64_sys_call+0x2a36/0x2e00 [ 34.663458][ T3634] do_syscall_64+0xc9/0x1c0 [ 34.667997][ T3634] ? clear_bhb_loop+0x55/0xb0 [ 34.672801][ T3634] ? clear_bhb_loop+0x55/0xb0 [ 34.677485][ T3634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.683512][ T3634] RIP: 0033:0x7f7f7c1e5dfc [ 34.687931][ T3634] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 34.707582][ T3634] RSP: 002b:00007f7f7ae67040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.715991][ T3634] RAX: ffffffffffffffda RBX: 00007f7f7c375f80 RCX: 00007f7f7c1e5dfc [ 34.724053][ T3634] RDX: 000000000000000f RSI: 00007f7f7ae670b0 RDI: 0000000000000004 [ 34.732167][ T3634] RBP: 00007f7f7ae670a0 R08: 0000000000000000 R09: 0000000000000000 [ 34.740152][ T3634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.748232][ T3634] R13: 000000000000000b R14: 00007f7f7c375f80 R15: 00007ffca46bece8 [ 34.756205][ T3634] [ 34.819138][ T3642] loop4: detected capacity change from 0 to 512 [ 34.862807][ T3647] FAULT_INJECTION: forcing a failure. [ 34.862807][ T3647] name failslab, interval 1, probability 0, space 0, times 1 [ 34.875709][ T3647] CPU: 1 UID: 0 PID: 3647 Comm: syz.0.71 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 34.886327][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.896507][ T3647] Call Trace: [ 34.899788][ T3647] [ 34.902728][ T3647] dump_stack_lvl+0xf2/0x150 [ 34.907370][ T3647] dump_stack+0x15/0x20 [ 34.911603][ T3647] should_fail_ex+0x229/0x230 [ 34.916308][ T3647] ? __io_uring_add_tctx_node+0xc0/0x2b0 [ 34.921968][ T3647] should_failslab+0x8f/0xb0 [ 34.926650][ T3647] __kmalloc_cache_noprof+0x4b/0x2a0 [ 34.931968][ T3647] __io_uring_add_tctx_node+0xc0/0x2b0 [ 34.937465][ T3647] io_uring_create+0x7fe/0x920 [ 34.942245][ T3647] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 34.947820][ T3647] __x64_sys_io_uring_setup+0x31/0x40 [ 34.953310][ T3647] x64_sys_call+0x173c/0x2e00 [ 34.958047][ T3647] do_syscall_64+0xc9/0x1c0 [ 34.962579][ T3647] ? clear_bhb_loop+0x55/0xb0 [ 34.967362][ T3647] ? clear_bhb_loop+0x55/0xb0 [ 34.972133][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.978486][ T3647] RIP: 0033:0x7fd5726e73b9 [ 34.982950][ T3647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.002730][ T3647] RSP: 002b:00007fd571324fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 35.011229][ T3647] RAX: ffffffffffffffda RBX: 00007fd572876130 RCX: 00007fd5726e73b9 [ 35.019220][ T3647] RDX: 0000000020000280 RSI: 0000000020000140 RDI: 000000000000010d [ 35.027333][ T3647] RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000020000280 [ 35.035354][ T3647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 35.043437][ T3647] R13: 0000000020000240 R14: 000000000000010d R15: 0000000020000280 [ 35.051456][ T3647] [ 35.079692][ T3640] loop3: detected capacity change from 0 to 2048 [ 35.264361][ T3646] syzkaller0: entered promiscuous mode [ 35.269861][ T3646] syzkaller0: entered allmulticast mode [ 35.282536][ T3642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.295179][ T3642] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.311016][ T3640] EXT4-fs: dax option not supported [ 35.338980][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.446912][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.477795][ T3652] loop0: detected capacity change from 0 to 512 [ 35.507346][ T3652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.541352][ T3652] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.571237][ T3652] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 35.944846][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.253153][ C0] sched: RT throttling activated [ 36.355131][ T3664] loop1: detected capacity change from 0 to 1024 [ 36.422106][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.468199][ T3678] loop0: detected capacity change from 0 to 1024 [ 36.488450][ T3664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3664 comm=syz.1.76 [ 36.535050][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.553243][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.590398][ T3678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3678 comm=syz.0.82 [ 36.648510][ T3684] loop4: detected capacity change from 0 to 512 [ 36.693818][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.709864][ T3684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.749027][ T3684] EXT4-fs (loop4): 1 orphan inode deleted [ 36.754851][ T3684] EXT4-fs (loop4): 1 truncate cleaned up [ 36.812176][ T3684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.877253][ C0] eth0: bad gso: type: 1, size: 1408 [ 36.884717][ T3684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.916798][ T3709] loop0: detected capacity change from 0 to 128 [ 36.936702][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 36.936715][ T29] audit: type=1326 audit(1722434224.691:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c1e73b9 code=0x7ffc0000 [ 36.946353][ T3709] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.975861][ T3711] @: renamed from vlan0 (while UP) [ 36.980140][ T29] audit: type=1326 audit(1722434224.731:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f7c1e73b9 code=0x7ffc0000 [ 36.985936][ T3709] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.006435][ T29] audit: type=1400 audit(1722434224.731:241): avc: denied { create } for pid=3710 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.006465][ T29] audit: type=1326 audit(1722434224.731:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c1e73b9 code=0x7ffc0000 [ 37.057116][ T3713] __nla_validate_parse: 3 callbacks suppressed [ 37.057161][ T3713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'. [ 37.059331][ T29] audit: type=1326 audit(1722434224.731:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f7c1e5d50 code=0x7ffc0000 [ 37.097589][ T3713] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 37.105336][ T29] audit: type=1400 audit(1722434224.731:244): avc: denied { write } for pid=3710 comm="syz.2.92" name="igmp6" dev="proc" ino=4026533013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.129018][ T29] audit: type=1326 audit(1722434224.731:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f7c1e5d50 code=0x7ffc0000 [ 37.154687][ T29] audit: type=1326 audit(1722434224.731:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c1e73b9 code=0x7ffc0000 [ 37.158441][ T3711] loop2: detected capacity change from 0 to 1024 [ 37.178061][ T29] audit: type=1326 audit(1722434224.731:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7c1e73b9 code=0x7ffc0000 [ 37.207520][ T29] audit: type=1326 audit(1722434224.731:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f7c1e73b9 code=0x7ffc0000 [ 37.253307][ T3718] netlink: 'syz.1.94': attribute type 4 has an invalid length. [ 37.285911][ T3711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.294615][ T3718] netlink: 'syz.1.94': attribute type 4 has an invalid length. [ 37.309912][ T3711] EXT4-fs (loop2): shut down requested (0) [ 37.339873][ T3722] loop1: detected capacity change from 0 to 1024 [ 37.367413][ T3722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.402247][ T3722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3722 comm=syz.1.95 [ 37.461153][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.463495][ C0] eth0: bad gso: type: 1, size: 1408 [ 37.550253][ T3728] loop3: detected capacity change from 0 to 512 [ 37.561792][ T3730] FAULT_INJECTION: forcing a failure. [ 37.561792][ T3730] name failslab, interval 1, probability 0, space 0, times 0 [ 37.564932][ T3728] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.98: casefold flag without casefold feature [ 37.574508][ T3730] CPU: 1 UID: 0 PID: 3730 Comm: syz.1.97 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 37.597582][ T3730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 37.607814][ T3730] Call Trace: [ 37.610845][ T3728] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.98: couldn't read orphan inode 15 (err -117) [ 37.611144][ T3730] [ 37.625717][ T3730] dump_stack_lvl+0xf2/0x150 [ 37.630371][ T3730] dump_stack+0x15/0x20 [ 37.634688][ T3730] should_fail_ex+0x229/0x230 [ 37.639417][ T3730] ? alloc_netdev_mqs+0x7a5/0x8d0 [ 37.644631][ T3730] should_failslab+0x8f/0xb0 [ 37.649394][ T3730] __kmalloc_cache_noprof+0x4b/0x2a0 [ 37.654842][ T3730] alloc_netdev_mqs+0x7a5/0x8d0 [ 37.659700][ T3730] rtnl_create_link+0x233/0x680 [ 37.664612][ T3730] rtnl_newlink+0xe12/0x1690 [ 37.669271][ T3730] ? security_capable+0x64/0x80 [ 37.674135][ T3730] ? ns_capable+0x7d/0xb0 [ 37.678591][ T3730] ? __pfx_rtnl_newlink+0x10/0x10 [ 37.683642][ T3730] rtnetlink_rcv_msg+0x6aa/0x710 [ 37.688600][ T3730] ? ref_tracker_free+0x3a5/0x410 [ 37.693732][ T3730] ? __dev_queue_xmit+0x161/0x1fe0 [ 37.698881][ T3730] netlink_rcv_skb+0x12c/0x230 [ 37.703700][ T3730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.709317][ T3730] rtnetlink_rcv+0x1c/0x30 [ 37.713804][ T3730] netlink_unicast+0x593/0x670 [ 37.718649][ T3730] netlink_sendmsg+0x5cc/0x6e0 [ 37.723427][ T3730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.728763][ T3730] __sock_sendmsg+0x140/0x180 [ 37.733552][ T3730] ____sys_sendmsg+0x312/0x410 [ 37.738343][ T3730] __sys_sendmsg+0x1e9/0x280 [ 37.743015][ T3730] __x64_sys_sendmsg+0x46/0x50 [ 37.747809][ T3730] x64_sys_call+0x26f8/0x2e00 [ 37.752591][ T3730] do_syscall_64+0xc9/0x1c0 [ 37.757161][ T3730] ? clear_bhb_loop+0x55/0xb0 [ 37.761852][ T3730] ? clear_bhb_loop+0x55/0xb0 [ 37.766550][ T3730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.772461][ T3730] RIP: 0033:0x7fc702ff73b9 [ 37.776880][ T3730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.797044][ T3730] RSP: 002b:00007fc701c77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.805596][ T3730] RAX: ffffffffffffffda RBX: 00007fc703185f80 RCX: 00007fc702ff73b9 [ 37.813570][ T3730] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 37.821567][ T3730] RBP: 00007fc701c770a0 R08: 0000000000000000 R09: 0000000000000000 [ 37.829544][ T3730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.837685][ T3730] R13: 000000000000000b R14: 00007fc703185f80 R15: 00007ffc95a1cf78 [ 37.845938][ T3730] [ 37.862354][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.903239][ T3716] kexec: Could not allocate control_code_buffer [ 37.949031][ T3258] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.957570][ T3728] random: crng reseeded on system resumption [ 37.972966][ T3281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.017718][ T3736] loop0: detected capacity change from 0 to 8192 [ 38.033205][ T3736] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.130939][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.158494][ C0] eth0: bad gso: type: 1, size: 1408 [ 38.187501][ T3758] loop3: detected capacity change from 0 to 512 [ 38.194592][ T3758] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 38.223843][ T3762] loop2: detected capacity change from 0 to 512 [ 38.227695][ T3758] loop3: detected capacity change from 0 to 512 [ 38.241529][ T3762] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.248362][ T3762] EXT4-fs: Ignoring removed i_version option [ 38.255159][ T3762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.257261][ T3758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.267183][ T3762] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.106: corrupted in-inode xattr: e_value out of bounds [ 38.279905][ T3758] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.293267][ T3762] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.106: couldn't read orphan inode 15 (err -117) [ 38.306707][ T3758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.318509][ T3762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.349911][ T3684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.412793][ T3281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.428445][ T3684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.503735][ T3684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.570173][ T3782] loop3: detected capacity change from 0 to 1024 [ 38.586505][ T3684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.604414][ T3782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.620285][ T3684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.629627][ T3781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.111'. [ 38.642405][ T3781] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 38.656876][ T3782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3782 comm=syz.3.112 [ 38.670255][ T3684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.688784][ T3684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.706803][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.731702][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.740760][ T3789] loop2: detected capacity change from 0 to 1024 [ 38.765618][ T3789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.798846][ T3788] tmpfs: Unknown parameter 'si…e' [ 38.813472][ T3789] EXT4-fs (loop2): shut down requested (0) [ 39.029552][ T3812] usb usb9: usbfs: process 3812 (syz.3.121) did not claim interface 0 before use [ 39.064740][ T3817] loop1: detected capacity change from 0 to 1024 [ 39.071505][ T3817] EXT4-fs: Ignoring removed nobh option [ 39.077168][ T3817] EXT4-fs: Ignoring removed orlov option [ 39.097632][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.111175][ T3821] loop3: detected capacity change from 0 to 1024 [ 39.130735][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.151129][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.181774][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.357435][ T3835] FAULT_INJECTION: forcing a failure. [ 39.357435][ T3835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.370833][ T3835] CPU: 1 UID: 0 PID: 3835 Comm: syz.1.128 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 39.381671][ T3835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 39.391729][ T3835] Call Trace: [ 39.395008][ T3835] [ 39.397941][ T3835] dump_stack_lvl+0xf2/0x150 [ 39.402564][ T3835] dump_stack+0x15/0x20 [ 39.406819][ T3835] should_fail_ex+0x229/0x230 [ 39.411590][ T3835] should_fail_alloc_page+0xfd/0x110 [ 39.417332][ T3835] __alloc_pages_noprof+0x109/0x360 [ 39.422549][ T3835] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 39.427935][ T3835] folio_alloc_mpol_noprof+0x36/0x70 [ 39.433233][ T3835] shmem_get_folio_gfp+0x3eb/0xd80 [ 39.438400][ T3835] shmem_fallocate+0x59f/0x860 [ 39.443228][ T3835] vfs_fallocate+0x392/0x3e0 [ 39.447827][ T3835] __x64_sys_fallocate+0x79/0xc0 [ 39.452784][ T3835] x64_sys_call+0x2964/0x2e00 [ 39.457529][ T3835] do_syscall_64+0xc9/0x1c0 [ 39.462162][ T3835] ? clear_bhb_loop+0x55/0xb0 [ 39.466963][ T3835] ? clear_bhb_loop+0x55/0xb0 [ 39.471655][ T3835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.477706][ T3835] RIP: 0033:0x7fc702ff73b9 [ 39.482126][ T3835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.501923][ T3835] RSP: 002b:00007fc701c77048 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 39.510370][ T3835] RAX: ffffffffffffffda RBX: 00007fc703185f80 RCX: 00007fc702ff73b9 [ 39.518345][ T3835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 39.526375][ T3835] RBP: 00007fc701c770a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.534350][ T3835] R10: 0000000002400001 R11: 0000000000000246 R12: 0000000000000002 [ 39.542350][ T3835] R13: 000000000000000b R14: 00007fc703185f80 R15: 00007ffc95a1cf78 [ 39.550331][ T3835] [ 39.986232][ T3281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.065095][ T3843] loop4: detected capacity change from 0 to 512 [ 40.116963][ T3843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.137348][ T3843] EXT4-fs (loop4): 1 truncate cleaned up [ 40.147858][ T3849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.156802][ T3849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.170036][ T3843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.249814][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.270483][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 40.321273][ T3873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.140'. [ 40.336050][ T3873] netlink: 'syz.2.140': attribute type 1 has an invalid length. [ 40.423852][ T3873] loop2: detected capacity change from 0 to 1024 [ 40.439954][ T3873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.460846][ T3873] EXT4-fs (loop2): shut down requested (0) [ 40.510920][ T3891] loop3: detected capacity change from 0 to 256 [ 40.518187][ T3891] msdos: Unknown parameter '0xffffffffffffffffumask' [ 40.572494][ T3896] loop1: detected capacity change from 0 to 2048 [ 40.616427][ T3896] loop1: p1 < > p3 [ 40.627846][ T3896] loop1: p3 size 134217728 extends beyond EOD, truncated [ 40.637627][ T3901] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 40.666949][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 40.677229][ T3901] FAULT_INJECTION: forcing a failure. [ 40.677229][ T3901] name failslab, interval 1, probability 0, space 0, times 0 [ 40.689990][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: syz.3.153 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 40.700615][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 40.710816][ T3901] Call Trace: [ 40.714098][ T3901] [ 40.717029][ T3901] dump_stack_lvl+0xf2/0x150 [ 40.721647][ T3901] dump_stack+0x15/0x20 [ 40.725829][ T3901] should_fail_ex+0x229/0x230 [ 40.730571][ T3901] ? batadv_hash_new+0x3c/0x190 [ 40.735511][ T3901] should_failslab+0x8f/0xb0 [ 40.740174][ T3901] __kmalloc_cache_noprof+0x4b/0x2a0 [ 40.745474][ T3901] batadv_hash_new+0x3c/0x190 [ 40.750159][ T3901] batadv_originator_init+0x3f/0x140 [ 40.755487][ T3901] batadv_mesh_init+0x28f/0x440 [ 40.760420][ T3901] batadv_softif_init_late+0x3c2/0x440 [ 40.765891][ T3901] register_netdevice+0x293/0xe30 [ 40.770922][ T3901] batadv_softif_newlink+0x6f/0x80 [ 40.776066][ T3901] ? __pfx_batadv_softif_newlink+0x10/0x10 [ 40.781992][ T3901] rtnl_newlink+0xeff/0x1690 [ 40.786619][ T3901] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 40.792944][ T3901] ? _raw_spin_unlock+0x26/0x50 [ 40.797835][ T3901] ? __mutex_lock+0x221/0x8e0 [ 40.802522][ T3901] ? __pfx_rtnl_newlink+0x10/0x10 [ 40.807562][ T3901] rtnetlink_rcv_msg+0x6aa/0x710 [ 40.812579][ T3901] ? ref_tracker_free+0x3a5/0x410 [ 40.817644][ T3901] ? __dev_queue_xmit+0x161/0x1fe0 [ 40.822768][ T3901] netlink_rcv_skb+0x12c/0x230 [ 40.827565][ T3901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 40.833040][ T3901] rtnetlink_rcv+0x1c/0x30 [ 40.837465][ T3901] netlink_unicast+0x593/0x670 [ 40.842380][ T3901] netlink_sendmsg+0x5cc/0x6e0 [ 40.847329][ T3901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.852658][ T3901] __sock_sendmsg+0x140/0x180 [ 40.857367][ T3901] ____sys_sendmsg+0x312/0x410 [ 40.862142][ T3901] __sys_sendmsg+0x1e9/0x280 [ 40.866829][ T3901] __x64_sys_sendmsg+0x46/0x50 [ 40.871607][ T3901] x64_sys_call+0x26f8/0x2e00 [ 40.876298][ T3901] do_syscall_64+0xc9/0x1c0 [ 40.880855][ T3901] ? clear_bhb_loop+0x55/0xb0 [ 40.885547][ T3901] ? clear_bhb_loop+0x55/0xb0 [ 40.890409][ T3901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.896335][ T3901] RIP: 0033:0x7fbab04373b9 [ 40.900750][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.920505][ T3901] RSP: 002b:00007fbaaf0b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.928959][ T3901] RAX: ffffffffffffffda RBX: 00007fbab05c5f80 RCX: 00007fbab04373b9 [ 40.936936][ T3901] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000007 [ 40.944925][ T3901] RBP: 00007fbaaf0b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.953009][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.960984][ T3901] R13: 000000000000000b R14: 00007fbab05c5f80 R15: 00007ffed1cd2048 [ 40.969065][ T3901] [ 41.141642][ T3905] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 41.154406][ T3281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.171357][ T3915] Cannot find add_set index 0 as target [ 41.182935][ T3914] loop4: detected capacity change from 0 to 256 [ 41.206066][ T3914] FAT-fs (loop4): Directory bread(block 64) failed [ 41.212654][ T3914] FAT-fs (loop4): Directory bread(block 65) failed [ 41.221363][ T3914] FAT-fs (loop4): Directory bread(block 66) failed [ 41.227965][ T3914] FAT-fs (loop4): Directory bread(block 67) failed [ 41.236749][ T3914] FAT-fs (loop4): Directory bread(block 68) failed [ 41.243448][ T3914] FAT-fs (loop4): Directory bread(block 69) failed [ 41.250245][ T3914] FAT-fs (loop4): Directory bread(block 70) failed [ 41.281421][ T3914] FAT-fs (loop4): Directory bread(block 71) failed [ 41.316476][ T3919] loop0: detected capacity change from 0 to 512 [ 41.322996][ T3919] EXT4-fs: Ignoring removed oldalloc option [ 41.329077][ T3914] FAT-fs (loop4): Directory bread(block 72) failed [ 41.343539][ T3922] loop3: detected capacity change from 0 to 2048 [ 41.345197][ T3914] FAT-fs (loop4): Directory bread(block 73) failed [ 41.365442][ T3922] ext4: Unknown parameter 'subj_user' [ 41.421034][ T3919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.472888][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 41.488959][ T3928] geneve2: entered promiscuous mode [ 41.494427][ T3928] geneve2: entered allmulticast mode [ 41.574696][ T3932] syz.0.161 (3932) used greatest stack depth: 9696 bytes left [ 41.591146][ T3936] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 41.622182][ T53] kworker/u8:4: attempt to access beyond end of device [ 41.622182][ T53] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 41.639325][ T3228] udevd[3228]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.657528][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.680242][ T3944] loop3: detected capacity change from 0 to 512 [ 41.705396][ T3944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.722496][ T3953] @: renamed from vlan0 (while UP) [ 41.735004][ T3954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.173'. [ 41.735402][ T3953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.170'. [ 41.746298][ T3955] Cannot find add_set index 0 as target [ 41.753099][ T3953] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 41.770239][ T3944] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.779910][ T3953] loop4: detected capacity change from 0 to 1024 [ 41.806385][ T3953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.824758][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.836407][ T3953] EXT4-fs (loop4): shut down requested (0) [ 41.870903][ T3961] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 41.902140][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.913274][ T3971] loop3: detected capacity change from 0 to 1024 [ 41.915767][ T3961] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 41.922730][ T3971] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.953076][ T3973] loop4: detected capacity change from 0 to 512 [ 41.965022][ T3971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.977278][ T3977] loop0: detected capacity change from 0 to 2048 [ 41.983911][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 41.983925][ T29] audit: type=1400 audit(1722434229.741:481): avc: denied { mounton } for pid=3970 comm="syz.3.176" path="/34/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.991745][ T3973] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.013185][ T29] audit: type=1400 audit(1722434229.741:482): avc: denied { mounton } for pid=3970 comm="syz.3.176" path="/34/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.027619][ T3973] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.045449][ T29] audit: type=1400 audit(1722434229.741:483): avc: denied { write } for pid=3970 comm="syz.3.176" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.074178][ T29] audit: type=1400 audit(1722434229.741:484): avc: denied { open } for pid=3970 comm="syz.3.176" path="/34/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.077739][ T3973] EXT4-fs (loop4): 1 truncate cleaned up [ 42.099758][ T3977] loop0: p1 < > p3 [ 42.103546][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.108001][ T3977] loop0: p3 size 134217728 extends beyond EOD, truncated [ 42.140430][ T29] audit: type=1400 audit(1722434229.891:485): avc: denied { watch watch_reads } for pid=3970 comm="syz.3.176" path="/34/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.174620][ T29] audit: type=1400 audit(1722434229.931:486): avc: denied { create } for pid=3972 comm="syz.4.177" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 42.216794][ T3979] loop3: detected capacity change from 1024 to 0 [ 42.216964][ T3973] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 4: comm syz.4.177: lblock 0 mapped to illegal pblock 4 (length 1) [ 42.263204][ T3971] syz.3.176: attempt to access beyond end of device [ 42.263204][ T3971] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 42.343528][ T3971] syz.3.176: attempt to access beyond end of device [ 42.343528][ T3971] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 42.384245][ T3279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.403176][ T3971] syz.3.176: attempt to access beyond end of device [ 42.403176][ T3971] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 42.459562][ T3971] syz.3.176: attempt to access beyond end of device [ 42.459562][ T3971] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 42.481345][ T3971] syz.3.176: attempt to access beyond end of device [ 42.481345][ T3971] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 42.525052][ T29] audit: type=1400 audit(1722434230.281:487): avc: denied { bind } for pid=3986 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.551832][ T3971] syz.3.176: attempt to access beyond end of device [ 42.551832][ T3971] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 42.586179][ T3971] syz.3.176: attempt to access beyond end of device [ 42.586179][ T3971] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 42.599539][ T3971] syz.3.176: attempt to access beyond end of device [ 42.599539][ T3971] loop3: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 42.628117][ T3994] FAULT_INJECTION: forcing a failure. [ 42.628117][ T3994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.641469][ T3994] CPU: 0 UID: 0 PID: 3994 Comm: syz.2.182 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 42.651130][ T3971] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.3.176: unable to read itable block [ 42.652067][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 42.674843][ T3994] Call Trace: [ 42.678125][ T3994] [ 42.681164][ T3994] dump_stack_lvl+0xf2/0x150 [ 42.685775][ T3994] dump_stack+0x15/0x20 [ 42.689970][ T3994] should_fail_ex+0x229/0x230 [ 42.694685][ T3994] should_fail_alloc_page+0xfd/0x110 [ 42.700031][ T3994] __alloc_pages_noprof+0x109/0x360 [ 42.705250][ T3994] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 42.710676][ T3994] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 42.716260][ T3994] handle_mm_fault+0xd6d/0x2940 [ 42.721156][ T3994] exc_page_fault+0x296/0x650 [ 42.725846][ T3994] asm_exc_page_fault+0x26/0x30 [ 42.730763][ T3994] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 42.736580][ T3994] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 42.756197][ T3994] RSP: 0018:ffffc9000133fde0 EFLAGS: 00050202 [ 42.762464][ T3994] RAX: ffff888101262b2e RBX: 0000000020001200 RCX: 0000000000000007 [ 42.770459][ T3994] RDX: 0000000000000000 RSI: ffff888114cfaac8 RDI: 0000000020001200 [ 42.778437][ T3994] RBP: 0000000000000007 R08: 0000000080000000 R09: 0000000000000000 [ 42.786456][ T3994] R10: 0001888114cfaac8 R11: 0001888114cfaace R12: 0000000020001207 [ 42.794436][ T3994] R13: ffff888116041d92 R14: 0000000000000007 R15: ffff888114cfaac8 [ 42.802477][ T3994] _copy_to_user+0x77/0xa0 [ 42.806918][ T3994] readlink_copy+0x67/0xa0 [ 42.811354][ T3994] vfs_readlink+0xe6/0x1f0 [ 42.815913][ T3994] do_readlinkat+0x13d/0x210 [ 42.820519][ T3994] __x64_sys_readlink+0x47/0x60 [ 42.825384][ T3994] x64_sys_call+0x2a7c/0x2e00 [ 42.830072][ T3994] do_syscall_64+0xc9/0x1c0 [ 42.834625][ T3994] ? clear_bhb_loop+0x55/0xb0 [ 42.839366][ T3994] ? clear_bhb_loop+0x55/0xb0 [ 42.844141][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.850122][ T3994] RIP: 0033:0x7f7f7c1e73b9 [ 42.854587][ T3994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.874337][ T3994] RSP: 002b:00007f7f7ae67048 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 42.882847][ T3994] RAX: ffffffffffffffda RBX: 00007f7f7c375f80 RCX: 00007f7f7c1e73b9 [ 42.890978][ T3994] RDX: 0000000000001000 RSI: 0000000020001200 RDI: 0000000020000240 [ 42.898961][ T3994] RBP: 00007f7f7ae670a0 R08: 0000000000000000 R09: 0000000000000000 [ 42.906970][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.915003][ T3994] R13: 000000000000000b R14: 00007f7f7c375f80 R15: 00007ffca46bece8 [ 42.923076][ T3994] [ 42.929346][ T3971] syz.3.176: attempt to access beyond end of device [ 42.929346][ T3971] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 42.942556][ T3971] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 42.960834][ T29] audit: type=1326 audit(1722434230.711:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5726e73b9 code=0x0 [ 42.986302][ T3998] loop1: detected capacity change from 0 to 512 [ 42.987209][ T3971] EXT4-fs (loop3): I/O error while writing superblock [ 42.999409][ T3971] EXT4-fs (loop3): Remounting filesystem read-only [ 43.014743][ T1835] ================================================================== [ 43.022926][ T1835] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 43.030358][ T1835] [ 43.032700][ T1835] write to 0xffff888114c203d8 of 4 bytes by task 47 on cpu 0: [ 43.040147][ T1835] touch_atime+0x1f3/0x350 [ 43.044573][ T1835] shmem_file_read_iter+0x4b3/0x550 [ 43.049788][ T1835] do_iter_readv_writev+0x3b0/0x470 [ 43.055007][ T1835] vfs_iter_read+0x16e/0x3b0 [ 43.059615][ T1835] loop_process_work+0x7a6/0x1230 [ 43.064861][ T1835] loop_rootcg_workfn+0x22/0x30 [ 43.069746][ T1835] process_scheduled_works+0x483/0x9a0 [ 43.075235][ T1835] worker_thread+0x526/0x700 [ 43.079847][ T1835] kthread+0x1d1/0x210 [ 43.083965][ T1835] ret_from_fork+0x4b/0x60 [ 43.088416][ T1835] ret_from_fork_asm+0x1a/0x30 [ 43.093223][ T1835] [ 43.095556][ T1835] read to 0xffff888114c203d8 of 4 bytes by task 1835 on cpu 1: [ 43.103110][ T1835] atime_needs_update+0x261/0x3e0 [ 43.108162][ T1835] touch_atime+0x4a/0x350 [ 43.112513][ T1835] shmem_file_read_iter+0x4b3/0x550 [ 43.117746][ T1835] do_iter_readv_writev+0x3b0/0x470 [ 43.122968][ T1835] vfs_iter_read+0x16e/0x3b0 [ 43.127572][ T1835] loop_process_work+0x7a6/0x1230 [ 43.132625][ T1835] loop_workfn+0x31/0x40 [ 43.136898][ T1835] process_scheduled_works+0x483/0x9a0 [ 43.142387][ T1835] worker_thread+0x526/0x700 [ 43.147004][ T1835] kthread+0x1d1/0x210 [ 43.151106][ T1835] ret_from_fork+0x4b/0x60 [ 43.155543][ T1835] ret_from_fork_asm+0x1a/0x30 [ 43.160334][ T1835] [ 43.162660][ T1835] value changed: 0x2d5cda99 -> 0x2df57119 [ 43.168471][ T1835] [ 43.170799][ T1835] Reported by Kernel Concurrency Sanitizer on: [ 43.176956][ T1835] CPU: 1 UID: 0 PID: 1835 Comm: kworker/u8:5 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 43.187819][ T1835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.197886][ T1835] Workqueue: loop1 loop_workfn [ 43.202692][ T1835] ================================================================== [ 43.216048][ T3998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.221030][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.228916][ T3998] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.248487][ T3974] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 43.282557][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.519050][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.556960][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.606423][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.656251][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.725622][ T29] audit: type=1400 audit(1722434231.481:489): avc: denied { search } for pid=2998 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.747044][ T29] audit: type=1400 audit(1722434231.481:490): avc: denied { read } for pid=2998 comm="dhcpcd" name="n25" dev="tmpfs" ino=1620 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.776977][ T11] bridge_slave_1: left allmulticast mode [ 43.782729][ T11] bridge_slave_1: left promiscuous mode [ 43.788529][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.798308][ T11] bridge_slave_0: left allmulticast mode [ 43.804028][ T11] bridge_slave_0: left promiscuous mode [ 43.809733][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.906244][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.917074][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.927389][ T11] bond0 (unregistering): Released all slaves [ 43.936329][ T11] bond1 (unregistering): Released all slaves [ 44.037650][ T11] hsr_slave_0: left promiscuous mode [ 44.043616][ T11] hsr_slave_1: left promiscuous mode [ 44.049378][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.056904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.064619][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.072030][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.081641][ T11] veth1_macvtap: left promiscuous mode [ 44.087267][ T11] veth0_macvtap: left promiscuous mode [ 44.092771][ T11] veth1_vlan: left promiscuous mode [ 44.098155][ T11] veth0_vlan: left promiscuous mode [ 44.183765][ T11] team0 (unregistering): Port device team_slave_1 removed [ 44.193929][ T11] team0 (unregistering): Port device team_slave_0 removed