last executing test programs: 5m5.572249335s ago: executing program 32 (id=485): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 4m56.148022184s ago: executing program 33 (id=607): socket(0x2, 0x2, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8c, 0x0, &(0x7f0000000580)=[@clear_death, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x1}, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0x2100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/114, 0x72, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/212, 0xd4, 0x2, 0x30}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}, @increfs], 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 4m49.173296306s ago: executing program 34 (id=722): unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 4m48.221208973s ago: executing program 35 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x36080, 0x2100}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8510}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4m46.795509168s ago: executing program 36 (id=742): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r2], 0x7c}}, 0x80) 4m45.429097368s ago: executing program 37 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001900010000000000000000008020"], 0x34}}, 0x0) 4m44.092293056s ago: executing program 38 (id=759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x55c, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x1}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x500, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xf}}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xffe0}}, @TCA_FW_POLICE={0x418, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x1, 0x7ff, 0x9, 0x3, 0x80000001, 0xd, 0x9, 0x8, 0xc, 0xcc, 0xb, 0xb, 0x2, 0xdd, 0x80, 0x4, 0x0, 0x1, 0x7, 0x0, 0x7, 0xa, 0x3, 0x8, 0x8, 0x5, 0x80000000, 0x8, 0x8, 0x80000001, 0x6, 0x6, 0x0, 0x6, 0x1, 0x7f, 0x7, 0x7, 0x2, 0x7, 0xf0d2, 0x68b, 0xdd03, 0x61, 0x45197d10, 0x3842, 0x800, 0x2, 0x4, 0x5, 0x0, 0xf63e, 0x9611, 0x7e, 0x3, 0x4e, 0x9, 0x580, 0xa402, 0x2, 0x0, 0x9, 0x4, 0xa9b4, 0xff, 0x0, 0x6, 0x71, 0x7, 0xf, 0x0, 0xfff, 0x0, 0x5, 0x40000000, 0x1, 0x200, 0x5, 0x1, 0x8af, 0x1ff, 0x65ee, 0x0, 0xb, 0xf5c, 0xfffffffa, 0x2, 0x4, 0x400, 0x9, 0x356a, 0x1, 0x2594, 0x0, 0x7fffffff, 0x63, 0x6, 0x45c, 0x8, 0x86, 0x4, 0x4, 0x4, 0x77, 0x4, 0x2, 0x7, 0x8, 0x6, 0xfffffffd, 0xcb4, 0x3, 0xa, 0x81, 0x2, 0x4000000, 0x545d, 0x10000, 0x6, 0x9, 0x8, 0x2, 0xff, 0xa, 0x6, 0x7, 0x100, 0x8, 0x4, 0x9, 0x5ad5, 0x3ff, 0x7, 0x40b, 0x4, 0x1, 0x2, 0x40, 0xfffffffd, 0x4, 0x4, 0x2, 0xfffffffe, 0x8000, 0x1c003, 0x28, 0xffffffff, 0x0, 0x7267, 0x52, 0xffff, 0x6, 0xfffffffa, 0x1, 0x9, 0x6, 0xec, 0x8282, 0x7, 0x200, 0xfffffff8, 0x80, 0xfff, 0x8, 0xd, 0x80000001, 0xff, 0xffff8001, 0x80, 0xed4, 0x400, 0x8, 0x7, 0x5, 0x8, 0x8, 0x5, 0x8, 0x4, 0x0, 0x3, 0x800, 0x7, 0xd, 0x9, 0x800, 0x8, 0x401, 0x80000000, 0x401, 0x8000, 0x5, 0x3, 0xf, 0x5f9, 0x400, 0xc, 0x3, 0x2, 0x7fffffff, 0x7, 0x1, 0x0, 0x6, 0x6, 0x9c7d, 0x714, 0xfffff7fa, 0x2, 0x4, 0x80, 0x6, 0x6, 0x800, 0x400, 0x8, 0x9, 0x8, 0x6314, 0x0, 0xed3, 0x5, 0x401, 0xff, 0x3, 0xfffffffe, 0x4, 0x1d, 0x0, 0x4, 0x0, 0x10, 0xfff, 0x5, 0x9, 0x380, 0x6, 0x1, 0x100, 0x8d, 0x5, 0x5, 0xe, 0x2, 0x101, 0x8001, 0x0, 0x9, 0x1, 0xffc2, 0x4, 0x7fff, 0x530dd6d2, 0x3]}]}, @TCA_FW_INDEV={0x14, 0x3, 'vcan0\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_ACT={0xa8, 0x4, [@m_bpf={0xa4, 0x5, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x7, 0x8, 0x2, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x5, 0xfffffffffffffffe, 0x400, 0x7}}]}, {0x3b, 0x6, "4fe5f5e2f40a364f67b78acc71c7ca5b55ee6fae6de441c5bcf0c77d9249315d97621582636ff471b2f59a10a3a0b837488d84464a412b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffeff}]}, 0x55c}, 0x1, 0xf0ffffffffffff}, 0x0) 4m37.926919113s ago: executing program 39 (id=790): mlock2(&(0x7f000081a000/0x4000)=nil, 0x4000, 0x0) 4m35.368468909s ago: executing program 40 (id=824): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@local, 0x18}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, 0x0) fstatfs(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40000) 4m33.942024984s ago: executing program 41 (id=834): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000000a09040000000000000000020000002c0004802800018008000100666f62001c000280080001400000000c080003400000002b08000240000000020900010073797a30000000000900020073"], 0x80}}, 0x0) 4m33.12058223s ago: executing program 42 (id=846): r0 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x107079, 0x0, 0x7, 0x288}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x51, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m32.649175748s ago: executing program 43 (id=855): r0 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) 4m23.213583138s ago: executing program 44 (id=964): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200576d500000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001d00ca0e00003bca9428b6c750b51d8c5defb299ff3df7dd762edca0f1ba28ad7c0ba7e88a900bc04b14325aa7cacc16e5464fa0023d0ad1655d22c55302d856fd0dc8d0344a91939a01e4fa88a3a81e59856d1d4fd5910e66dcbef9511a4f923df6c6fed7759edec4bfab7206eda8e58f46245c54a564d67f2b9d56fe45f822a4195f663ffd6d"], 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x40000) 4m22.709909609s ago: executing program 45 (id=980): mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x10) chroot(&(0x7f0000000780)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m20.031165605s ago: executing program 46 (id=2747): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000011000000", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1m43.444641004s ago: executing program 47 (id=3283): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1m34.614873975s ago: executing program 4 (id=3384): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0x42) 1m34.614665495s ago: executing program 4 (id=3385): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800090000000000000000000000000448110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) 1m34.363044366s ago: executing program 3 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000010a9f0200"], 0x40}, 0x1, 0x0, 0x0, 0x24040844}, 0x40844) 1m34.279270712s ago: executing program 3 (id=3400): syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251000000008003b000300000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 1m34.212749538s ago: executing program 3 (id=3403): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) 1m34.202848438s ago: executing program 3 (id=3406): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 1m34.075053229s ago: executing program 3 (id=3407): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmsg(0xffffffffffffffff, 0x0, 0x40000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 1m33.876128315s ago: executing program 3 (id=3411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x18, r3, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 1m33.876018365s ago: executing program 48 (id=3411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x18, r3, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 1m33.746827125s ago: executing program 4 (id=3416): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 1m33.68103484s ago: executing program 4 (id=3418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 1m33.586499448s ago: executing program 4 (id=3421): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, 0x0, 0xa0242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) unlink(&(0x7f0000000140)='./file1\x00') 1m33.44485099s ago: executing program 4 (id=3425): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800090000000000000000000000000448110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) 1m33.444730099s ago: executing program 49 (id=3425): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800090000000000000000000000000448110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) 1m33.205568209s ago: executing program 9 (id=3427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 1m33.126000185s ago: executing program 9 (id=3428): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1m33.072380249s ago: executing program 9 (id=3429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 1m32.948845479s ago: executing program 9 (id=3430): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 1m32.921631812s ago: executing program 9 (id=3431): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(0xffffffffffffffff) 1m30.540605114s ago: executing program 9 (id=3446): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1m30.540518614s ago: executing program 50 (id=3446): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003040)={0x8, {"488085fddf7e1378d3ad4adb6e165913c1f7ae15c9b4ed75d7413838ff0d9381cead5adbe8228d9ba29fe815a6f64afca949ca64011b9d8c93b4272d6428962fe017b1cb68796b7b800b25eb3013496be2e3e973309e6842f2df0e5309a233d16ced2bc26cd6f7db616268621fe160c1644afc707a535571e0a936469f5dd6d60c6962109cd8de336fc0938bcd412788f01c1d84e33d5eaa3e140944ddefde0366395044cf0f095786b3f1fd27c0eaf2d0df657acf52c9220297bc28779a85ac06d4f14c31cbfced5519b61ddf599c08c7f10e385e4a6637e44ce117631e6d561c5118ad8e21bba948e572e54c67516e0f2a504f05f23e00d9b04160dac7e52d6caacf617d94e200e9c97771d56fe7b2ad6b69247904463f36b11e74b41ea9e63e77ded5af1406fe0f01f2350e756fd41c94f9dee22f611720853d7f8fd755903f1c3e044bd704bd4255c570cc0c82cacec7b9b7720cd6d5b2cd96e583ff1ddb0ad39155daa2f29a4f61298b44ea802bbac9b1f552cf0279f52ff200178468b94b293f7052817d89adb9130a3eaec5ceeeb386a31a7d9807f069ad07e3488e99a0b7f7f92fc2a63226175432a93ae4dc820e702d21bdec10a773c7b3de3f0ec4b5f8af60a159aaa4231ed4e79883acf5d2eed3a0fd3445d46d7fbbd47f2c610d96d6435293b103db15b8e7383e63e9d672410f5248183d4e608e7aee4d9dbfd040fb3fae39faec3cc0f5410d0d479bc1b7addd255ba502a52fa858eb6574530fd16c01e1138b19258e1c40b9a29a8672f418159f663bc8fe634e3a0d23dde1ced471cfb1decc1a9464667771b795229b1906651e9e5e4402c7e75182b1432acb4b54c499358585aa83fca804fbdd12dfd3b9e95b0ac718cadb879a2898d86c4ed914a59918df6ba519de4599f662811202158e418cef0d103ed4e77833d4dea6e59f7fef1c86f818121655dd1b2cb3717c892a289797049911356b5dd5dc0c50caadd0dd0318994d730fd6e6953e01730fb2682ab3f7ca8b4d596574456f59b95f34ff6f79db68b495010b8816a7b55229b35a2790f25c42ef1efcc5271c66500fc285de61516fc401518ba1ae388f90b0a5760e01031ceed37d1eb8a792f4a196a9fa0ff1579358bfe5c63744027d1a01e0a4602c79c2fe727034a4d810f0a2c30dc5a4c122e510e4d6348774754bf1f924c1d5a31dccf345a6c752389cc38e46e968e3b2815e2ecc3e5827f198f5d836b5783e9d7cc5bc5ba1715d23a4c35157b28e997010c627cbcebda89d08ac88e3d2f387c87af78b2a565dd5704bf3c12e4019d91890ad4f660345b384b59fad6d9f56f1fcf35babe5a9fbd8dd3908be450edf05ca8a3154fb3ac1af485508c61a7ba322ac06928e7d660fee6bfef74c9c4f22bbab318077446163a3230a3d486ce6d71aed12e2581e4208eed1a540560921ac89e9372482594351a5ff0cf9e95e80f0a69c4d621638c9056ae0bdfc44895f061767aba8400da865b73b5488c690694af744372c00d87bba4664a60f13f1453337113055d7b659a87208c1e663e4d35f0ebcfe70459f5ec5812434468cec38d3fbcf90598de986b3d49ad45e7b3b230fc389b5278ed6242abe9c44a8c74438968cc9b7a253d89c5b14f7a917b86a6d51f5d5380f2a7606dbe1867fd781fab284d153e20f5bf1a2c8156b93e60dc8945eb8385d937537b785f6f6af81ea0131398c77819ddea78eadf6b6f019db772e69e9cde3540ddc95625987b4a4e1dbbf15bc0217abac6cc3ff0650ed11fa612b90afaab842be4c2bd9967702b023e8ecd5f4a0e62af56f7320241a8516bcdf344a4421eed035b8c5a126820c5dc3962f5df4bf369bd6260eb09aa8e1310bf6f28aba0e3236f699721daa26950de7fa8fd8c3d2adebc101e304d0ed1af839c74b6cc42a6d7244f6b31ed08f6f12f62569b2c0602cc371962bff74b9b3c5f6326247d4ffec7f2d0a073e5a678e76f4243533001b1c0de6739c5c6ec0195fa9a8e898c2068bb614c40c403324e84cdbc530121217ba49f300aa8d5056d170d0a6bc8827ee20d55401b9f401b12e212cf630781139978b5fb38fdf768fec87b79f7a70d6083c3df98019ebd09b7941708e06c8d9fa930a1fdb993e0061343c87b4cf47dd36f9a3d603ca986f5144af403b7b04a93f5808a8c192df5e4c17af1ec23eddd1e7fc91109e6a4cfe5e23435bcabf3915ce5242cb6f7974e97c8ad3773e3a510afa52c4193c36fd1b99a02ece5b19ad35eb8fa97b57fd1641b463de79cdd2aac5d5b4060a040ad1d5752d70015b74d556fb4ef0cc8747591edc8858707616104f0ec342fb3a9b95df31b6f84e56387aae80a72d8dd670be7aaeef54065d6e2d7837481ce5622ee3c115d02d50efdb20aaf25b636d6d6c7e49f50a4b30ae243ecf1187ffe851c52bb1849c5e5c0979b758b747aebfdab58d8fd60faa5d5005f401c661256183dd4e7cba38b4ccf03506398eab901595dc2de27ab231abdddffc9d120abd8025b77ac47f39b6373a38a09bc045559578ccdf0402385177d499333d06d2cd3f604689d50dcd01b04ffbcb545385da389e4b6102ee77febb8a34a906f822601e61d2d3fc9e206caf3753f65422a5ff31dc3b3c4d09aa9a90f9ebc858ee2e4df6a730948e436586c665a3c64aab00aa757d252eec5b8bea5035a5b9f644cb84a991286edc2a394cef9fd40ad085aa99680aea363dc163c2ef40e0f289e0b79dc600f31ae510bbd74f963632ff25230a1ec866fed0db0d0af59c5b9f4a18659f5a218c3d0db80700719a61e59efbd5f996145139e5654a9290bf504eb7453775b8c6190ff51d4c04ce9384060f1dd34799fee04c0f951ae15cb589f80dc544c05421d60f51cbc78df7dceff213575bfebe2bb307d196ef0a5cf3c2608fbb969a574e6dce9132246447a84cab6dd4923281cf40bc19c29585a02bc0d2d491907e5b528a1cfc7b2fe88dc2520ea49903423cb7a0d23530daa7217e7f312d4ec67c02fc74ab8d91b8ead50bfe9508b0f7d70e88868ee1a5f38349054374ae463d1148e0ca238c0f9fe7b40f6fba87498697f3220612ea66feb18a29f1df04234ac3d69e0706d0deef321d09ee16de188a32f4c41635cf48ee35a42140fc08b42c2e0e289a3c73fd4b0e656a72b29b99093127a17aaa199610787787abb0f4613dd03332a9306b9b5e98e9c839ffce5e72c44b288593bee47253613dc0fc3e583ab9aac7e1a161dfc36bd038d533eb6829b22dc1a01f055c16f83c1b1abe049b5744508456658c6df44c13d6ab1a18d76a55740cdcfca4a1dd81b54d9c4e71cef9f4b55f1ebc7751766175d631f9607f22a613377f6d96afaddbc66cbeef20ae578468f33265516ee711e2591e1af272a35bf5cedc78aec6e330bf6f3f3b9cdb7d373754125c9caea6a4d344d098c7332175b09441cc11040e5b71e9b975b2aaaaa5f8c5f502b00ad3ade9de204602aa227c9f11da55107b79802c09d246050c6580d92559a47935cfb59b47e88aa8095ea1ac34578697ffe89c440a2369f6661db2c24f1056d553e200184b927b359efba5db1e69e7f2cf5e4dd9c9bbc3e085fc38c43f436aa47abcc1e9986fc0226262588110c5b27c6fe9b8072cd8204c500883d3b9feaed80d5d87929d01b9bad995ed58a1be3ccad600840c6424625f4f4c221c8e1cd11af1a5ac153954ac6b441692f296ac2d529233d317fecf3fbfa53f77c8ea47d1385e3ca4b8b55fd2467cac15af1bfa04fb41784305a4b9aed6880cfba9629d6dabd22b2bd90c1aad0f2e0dff0777112b1e313447cf9417a52a58b17cc73ab03d4841ec9b1dc3f75d0fb5ece65c99982b338bb2f42b68104d94c826247814bd68e7c9664e8b2a9fdaf7fde4730960b43a496cb818badfbc97d1e51aa7817657e49536e69cacb3c4abb27dfe10d5c962fabdd3056d290a2b969e7f61d144e22539c5e2027b57c8e099db6ab8f0fdda7412b393af60e3299478744e9071801c4c39b0c87d4f237ade73b955812f254e641844e985d40f3e4df51bf7a9c81f02d22ad8296fe94d4664f3c0d113974ba222dab68c4407e9d5359205a5fec059d4370e0d15fd040ced32baa7e8586d38680a4c2e4e5679c0d374636e9dc0fd9a06808671f08e8c19b0bed18540de8107855f410f8954e078755a8c7b0822c25e2534887c9593aa1e008e78244cfec5b347a847ecf61cb207dcb2170b663a54d98ffeea991a9d944e4a8302bf37231bf3558c6b2fcaf925becb663bb574341bc81bbc50e9f0108c5d8a7783caf25bcb3bc24368e8a4915785652877555d22f7d6cbcb12049180ee4c49502d41c0fb00e31f3835b53e622e85290ee5a641eb9215567fed4782484ba8ccb43d81d3ef3ca5d8a2e3389864c15946e3d5dad607447f35a5396c27e99e20a1b98393169d85e788e9c4f9367649b308094479bc0ad8d68f0dc655724e2d9f599557f567fe7fd11f87b37df7ce0530e40d7e0ab06c2b273716e2598bd6e816c18c2e3c038b199e58424a5d72759af13e121e21d263fa0f24577a32b4356919cc22c5d1929b15590a53861aaf68aaa9ed404d1e64c3c6b0fa19e0a5299bd46867aff993b87ce96fd493fa2b125ea23907f9598acc33cd7e90c2383d5af5d232d979766ac2743c93d947db811d38df20742fa1db7c6f2306ec008ca9d53faf1a7cc2372d42437f906ef6ff9db785ac575c97e4f568e57414a0881ffe1b8dee59240305e28ab5f4f2c990c959009b022a656386229c7a71b3fcbc381a1f3511751ef19653d8e7dd0de12f630c719413a84b385802f5e8e2680cc2afa7fbb1cd1193a1e5af32ad07b24ba1c05904d3325634d10aa685d97f9c1d58377cfa46f17f0f57c7d48ce0917a8b4f5bccdf60e52764b7a826e6ccab1b70821a74cc5cc2e15532d3ef346aaf9c31fe0e0776bb1e3f4f5f276bcf53f5ea9018609b18b47497dba8e73676d2fc2fba47472ffba25ba7ddca1e9754b516eff05a05eaba9e7752f8d97f99684e3a53ded2d2c1913a6e488c65f57f8d85d261c762c37015c756e0aeed54edda41236bae33ed83c688478bcd94ce9e67971c0f8e588f1a3a4cd3f7da5e571c1984d9c9a10bb7eaf8414cbabf5fb97a17a67d10ae1a7ab96a8df88da1e82e797e67b534f765a5dcac76bb769d9547f375cfbea8d9f434f48d60e05df8797919fef5cb01a04177ed092a37f71f7948279bc4c35e3239e943a1507cff0b7152dd95c27e573e0191cfe1bc9f3862e5329ddcd160c61fc5bb82b57d8086e1e74abfc36bb43404357c50eb150fcaea9aac90fa0c413ea9f8538055a45b77d5a7548f6a4f2414714495576a1de459a55ab298a2a2fa33459da0d205e4b91d340c0721226e546f323bb878605590b66516fa51fd635e5eaa580486f6fb543b6b5236871aa3dedcb44e7d73d9bf704420fc0bb9b1a0f21e848ed9161e9bf1ae3bc628861b5007f0a38884a178dc85dbf034e9234fe603698cda4811dfcb73253335ca7cee533957578a9b97f149ae6dbd43c4aae8a16da135830f7a1c5b913838d5c28936f45f2d9ed991ec7a3ab83df4dd6fe2ff720a6b8abf40927bf8835bfa25effb92eadea47ae1629193ee5707767b13771cb105f231be2af8380a85b9de42f682d22d17c926ccbe39ea3fa7a5d3c0f6b3dc7802b927a36cd04ade3e02bf8ce06a52585388fb8f49df4dda68e9eb426da9c0909d5b9cf4b16c2e3f78331c8683a1698033ea0b1ed4dd33edeecd89c4f14caf84d52336e500", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1m28.004963808s ago: executing program 7 (id=3467): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) fallocate(r0, 0x0, 0x11, 0x8) 1m27.773552067s ago: executing program 7 (id=3469): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6000002", @ANYRES32=r2, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 1m27.633120618s ago: executing program 7 (id=3470): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m27.47688379s ago: executing program 7 (id=3471): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 1m27.295265595s ago: executing program 7 (id=3474): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1a18814, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x181042, 0x187) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) writev(r0, &(0x7f0000000140), 0x0) 1m26.252782359s ago: executing program 7 (id=3481): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 1m26.252666629s ago: executing program 51 (id=3481): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 13.930892327s ago: executing program 5 (id=3944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x25, 0x7, @val=@iter={0x0}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xcee6, 0x0, 0x40a82, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xf}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) 13.051283368s ago: executing program 5 (id=3949): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x814) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8058) 12.972895215s ago: executing program 5 (id=3950): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) preadv2(r0, &(0x7f0000000600), 0x0, 0x0, 0xe, 0x0) 12.972713045s ago: executing program 5 (id=3951): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 12.876098822s ago: executing program 5 (id=3952): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 11.568387148s ago: executing program 5 (id=3962): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 11.232345305s ago: executing program 52 (id=3962): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 4.22085629s ago: executing program 6 (id=4011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 3.136147447s ago: executing program 6 (id=4016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60, 0x0, 0x5c}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f0000000640)='\x00\xac=\x9d\xd2\xdb\xe6\xc0\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x97\x95\xa4kP\x99YO\xb8V\xd5p\x90Xf+\x86\xc5\x92\x81\x0f\xc7\x1eo\xaa\x19\x99x\x84*\xdf\xa5DDU\xf4\\\xac}\x1d\xb8(\x19\xe6~b\xd4\xcbR4\x9d>L\xb5\"\x0fdbD\x94\xfb\x13.(:\xda\xf1\x0f\xb3\xaf\x89\xab\xbd\t\x19\xf4r\x00\xa5\x87d$\xf2\xae;[m\x9eZ\xa2\x96\x12\xfelY\xf6\x88\x0fN\x12\xba\x9c\x00'/253, 0x0) 2.998962588s ago: executing program 2 (id=4020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) socket(0x10, 0x3, 0x0) 2.701673802s ago: executing program 2 (id=4021): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(&(0x7f0000000040)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") 2.189043113s ago: executing program 6 (id=4026): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.057150914s ago: executing program 8 (id=4028): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x814) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8058) 1.784162736s ago: executing program 0 (id=4030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 1.772767667s ago: executing program 8 (id=4031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) socket(0x10, 0x3, 0x0) 1.537615106s ago: executing program 0 (id=4032): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.49264317s ago: executing program 1 (id=4033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000b7080000080000007b8af8ff00a6d527000000bf910000000059c4d233a95eae3429ffef2d1fb0b7cc00000000000085000000010000000000000000001f6c95d0c92d048a0225300e60d81bdcfbfdf7a3be105101097cbaf3a9a7c49a051d7e32ef18c06274e9488848b1a7c9839b1e1de519a0ae4b5786a588d6f35efdff7ba4f1bb8c088ce26a11ed3c5c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_bp={&(0x7f0000000340), 0x3}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x10000003}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xd, 0x7, 0x0, 0x400, 0x7a5d4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x2, @perf_config_ext={0xffffffbfffffffff, 0x11}, 0x2, 0x101000, 0x6bbcd0f1, 0x8, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 1.210320383s ago: executing program 6 (id=4034): openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000007cc0)=@newlink={0x54, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7f}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x7}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x9}]}}}, @IFLA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) 1.210032463s ago: executing program 0 (id=4035): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 1.209861392s ago: executing program 8 (id=4036): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x144}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.037886856s ago: executing program 2 (id=4037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 938.381194ms ago: executing program 2 (id=4038): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="e0a2062c23599e7cbac7ea4bc8603102331c8683adea363f9a99617b95a69d15d9567d2a49634efe6aa68cded8340a99b15b3ee27596c95a51eb37", 0x3b}, {0x0}, {&(0x7f0000000180)}], 0x3}, 0x4008050) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) 937.942094ms ago: executing program 1 (id=4039): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=1,errors=remount-ro,check=strict,codepage=932,nonumtail=0,shortname=mixed,shortname=lower,iocharset=cp834,shortname=mixed,nonumtail=0,iocharset=cp866,rodir,\x00'], 0x2a, 0x33c, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x141242, 0x40) 893.298218ms ago: executing program 8 (id=4040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x15ce, 0x8, 0x3, 0x50040733}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="8000000000"], 0x1460}, 0x0, 0x40c4, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 808.872635ms ago: executing program 0 (id=4041): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000"/16, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) 447.886524ms ago: executing program 1 (id=4042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 447.053484ms ago: executing program 0 (id=4043): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000280)={0x3, 0x5143, 0xd9, 0x401, 0x16, "4daf4531528990883c19d9c964f68db72ccf6a"}) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef) 446.625294ms ago: executing program 8 (id=4044): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 402.130158ms ago: executing program 8 (id=4045): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r1, &(0x7f0000000100)='net/sctp\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c6572300000000000004c8fcb1972045b84296877e59b86d1ad80f5f909ee3a4650e8606f8c140cd0b1b4601c6701f342ad14275208d4e58e2a63b3dabc50fb1bd6f1db7987916b646c"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 372.01338ms ago: executing program 2 (id=4046): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 371.72957ms ago: executing program 1 (id=4047): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) 216.809053ms ago: executing program 0 (id=4048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 203.876054ms ago: executing program 6 (id=4049): clock_settime(0x7, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c60000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}}, 0x24) 162.706147ms ago: executing program 2 (id=4050): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000b7080000080000007b8af8ff00a6d527000000bf910000000059c4d233a95eae3429ffef2d1fb0b7cc00000000000085000000010000000000000000001f6c95d0c92d048a0225300e60d81bdcfbfdf7a3be105101097cbaf3a9a7c49a051d7e32ef18c06274e9488848b1a7c9839b1e1de519a0ae4b5786a588d6f35efdff7ba4f1bb8c088ce26a11ed3c5c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_bp={&(0x7f0000000340), 0x3}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x10000003}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xd, 0x7, 0x0, 0x400, 0x7a5d4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x2, @perf_config_ext={0xffffffbfffffffff, 0x11}, 0x2, 0x101000, 0x6bbcd0f1, 0x8, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 162.510167ms ago: executing program 1 (id=4051): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 75.277474ms ago: executing program 6 (id=4052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x2010408, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x0, @initdev}}) r4 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() read$hidraw(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000096) chmod(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x0, 0xd, 0x7e6, 0x895, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, 0x0, &(0x7f00000006c0)}, 0x20) 0s ago: executing program 1 (id=4053): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.191661][T14251] netlink: 'syz.8.3068': attribute type 1 has an invalid length. [ 250.281766][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.318280][T14255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.386828][T14263] loop4: detected capacity change from 0 to 512 [ 250.403998][T14263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.425070][T14251] veth7: entered promiscuous mode [ 250.435663][T14268] loop2: detected capacity change from 0 to 512 [ 250.452626][T14263] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.454637][T14251] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 250.501421][T14268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.518647][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.534161][T14268] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.728896][T14281] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3079'. [ 250.764253][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.825144][T14288] loop8: detected capacity change from 0 to 512 [ 250.851981][T14293] loop3: detected capacity change from 0 to 1024 [ 250.861540][T14293] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.861861][T14288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.868533][T14293] EXT4-fs: inline encryption not supported [ 250.898958][T14293] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 250.941645][T14292] loop9: detected capacity change from 0 to 8192 [ 250.950558][T14292] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.957637][T14297] loop2: detected capacity change from 0 to 1024 [ 250.967932][T14293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 250.976677][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.983379][T14293] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3084: bad orphan inode 11 [ 250.999318][T14293] ext4_test_bit(bit=10, block=4) = 1 [ 251.004740][T14293] is_bad_inode(inode)=0 [ 251.008973][T14293] NEXT_ORPHAN(inode)=3254779904 [ 251.013857][T14293] max_ino=32 [ 251.017151][T14293] i_nlink=0 [ 251.051610][T14297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.053178][T14293] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3084: lblock 2 mapped to illegal pblock 2 (length 1) [ 251.079527][T14297] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.114710][T14301] loop8: detected capacity change from 0 to 8192 [ 251.124721][ T29] audit: type=1400 audit(1755572313.651:4529): avc: denied { append } for pid=14296 comm="syz.2.3086" path="/476/file0/cpu.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.149724][T14293] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 251.158745][T14293] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3084: lblock 0 mapped to illegal pblock 48 (length 1) [ 251.174067][T14293] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 251.179845][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.183026][T14293] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3084: Failed to acquire dquot type 0 [ 251.203400][T14293] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 251.223482][T14293] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3084: mark_inode_dirty error [ 251.236522][T14293] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 251.248892][T14293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.293604][T14305] loop2: detected capacity change from 0 to 2048 [ 251.349923][ T3293] loop2: p1 < > p4 < > [ 251.358467][T14305] loop2: p1 < > p4 < > [ 251.378226][ T29] audit: type=1400 audit(1755572313.911:4530): avc: denied { read write } for pid=14304 comm="syz.2.3087" name="loop2p4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.401741][ T29] audit: type=1400 audit(1755572313.911:4531): avc: denied { open } for pid=14304 comm="syz.2.3087" path="/dev/loop2p4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.452297][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.462233][ T7369] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 251.476230][ T7369] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 251.488139][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 251.492161][ T7369] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 251.510722][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 251.581689][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 251.585851][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 251.612576][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3088'. [ 251.687107][T14317] loop4: detected capacity change from 0 to 512 [ 251.735076][T14317] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 251.783689][T14317] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 251.849918][T14335] netlink: 'syz.9.3100': attribute type 1 has an invalid length. [ 251.867443][T14317] EXT4-fs (loop4): mount failed [ 251.878230][T14334] netlink: 'syz.3.3099': attribute type 29 has an invalid length. [ 251.921245][T14335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.936088][T14335] veth3: entered promiscuous mode [ 251.944468][T14335] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 251.956068][T14338] netlink: 'syz.3.3099': attribute type 29 has an invalid length. [ 251.972969][T14334] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3099'. [ 251.989102][T14341] loop9: detected capacity change from 0 to 512 [ 252.004846][T14341] EXT4-fs: Ignoring removed bh option [ 252.012433][T14341] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.021877][T14341] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 252.047558][T14345] loop4: detected capacity change from 0 to 512 [ 252.058083][T14341] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 252.068882][T14341] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 252.077706][T14341] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.136893][T13181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.138488][T14349] loop3: detected capacity change from 0 to 512 [ 252.176219][T14345] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3104: Invalid inode bitmap blk 4 in block_group 0 [ 252.198831][T14349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.213495][T14345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.216547][T14349] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.253336][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.284831][T14352] loop9: detected capacity change from 0 to 8192 [ 252.350455][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.453879][T14368] tipc: Enabling of bearer rejected, failed to enable media [ 252.470536][T14369] netlink: 'syz.9.3113': attribute type 1 has an invalid length. [ 252.517069][T14371] loop3: detected capacity change from 0 to 512 [ 252.570579][T14385] loop8: detected capacity change from 0 to 512 [ 252.607806][T14385] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3117: Invalid inode bitmap blk 4 in block_group 0 [ 252.609256][T14371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.633220][T14392] loop2: detected capacity change from 0 to 512 [ 252.641506][T14392] EXT4-fs: Ignoring removed nobh option [ 252.654926][T14371] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.676149][T14394] loop4: detected capacity change from 0 to 4096 [ 252.676234][T14385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.683343][T14392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 252.711665][T14392] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3118: iget: bad i_size value: 38620345925642 [ 252.755832][T14392] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3118: couldn't read orphan inode 15 (err -117) [ 252.784468][T14400] loop9: detected capacity change from 0 to 256 [ 252.792893][T14392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.813751][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.834675][T14394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.875858][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.961384][T14404] loop8: detected capacity change from 0 to 256 [ 253.069060][T14410] loop2: detected capacity change from 0 to 512 [ 253.142917][T14404] FAT-fs (loop8): codepage cp850 not found [ 253.238840][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.251358][T14410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 253.282415][T14410] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.360954][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 253.379076][T14421] netlink: 'syz.8.3129': attribute type 1 has an invalid length. [ 253.393004][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.411457][T14424] netlink: 848 bytes leftover after parsing attributes in process `syz.4.3126'. [ 253.446457][T14429] netlink: 'syz.4.3132': attribute type 1 has an invalid length. [ 253.465818][T14427] loop2: detected capacity change from 0 to 2048 [ 253.483183][T14434] loop8: detected capacity change from 0 to 512 [ 253.490859][T14429] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3132'. [ 253.505368][T14429] 8021q: adding VLAN 0 to HW filter on device bond17 [ 253.519796][ T5661] loop2: p1 < > p4 < > [ 253.525862][T14434] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.557193][T14429] veth19: entered promiscuous mode [ 253.565473][T14429] bond17: (slave veth19): Enslaving as a backup interface with a down link [ 253.565522][T14427] loop2: p1 < > p4 < > [ 253.633996][T14442] loop4: detected capacity change from 0 to 4096 [ 253.665142][T14445] loop9: detected capacity change from 0 to 512 [ 253.716886][T14442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.744051][T14434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 253.753448][T14434] System zones: 0-2, 18-18, 34-34 [ 253.760418][T14434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.775312][T14434] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.800976][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.811866][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.826734][T14445] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 253.839986][T14445] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.855350][T14445] EXT4-fs (loop9): mount failed [ 253.886946][ T2992] loop2: p1 < > p4 < > [ 253.953136][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 253.965866][T14459] loop9: detected capacity change from 0 to 512 [ 253.974102][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 254.005928][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 254.017490][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 254.064035][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 254.076278][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 254.100215][T14459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.151869][T14459] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.177629][T14461] loop8: detected capacity change from 0 to 512 [ 254.211189][T14461] EXT4-fs: Ignoring removed nobh option [ 254.220328][T14469] loop2: detected capacity change from 0 to 2048 [ 254.256716][T14461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.270191][T14474] loop4: detected capacity change from 0 to 512 [ 254.285681][T14461] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3141: iget: bad i_size value: 38620345925642 [ 254.311903][ T3293] loop2: p1 < > p4 < > [ 254.318516][T14474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.333377][T14461] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3141: couldn't read orphan inode 15 (err -117) [ 254.348061][T14461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.366087][ T29] audit: type=1400 audit(1755572316.891:4532): avc: denied { create } for pid=14460 comm="syz.8.3141" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 254.432822][T14474] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.489066][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.583735][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.724232][T14469] loop2: p1 < > p4 < > [ 254.749432][T14489] loop8: detected capacity change from 0 to 512 [ 254.839770][T13181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.851133][T14489] EXT4-fs: inline encryption not supported [ 254.857136][T14489] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.892798][T14489] EXT4-fs: test_dummy_encryption option not supported [ 255.135676][T14505] loop9: detected capacity change from 0 to 128 [ 255.154751][T14504] loop2: detected capacity change from 0 to 512 [ 255.212250][T14504] EXT4-fs: Ignoring removed bh option [ 255.222459][T14507] netlink: 848 bytes leftover after parsing attributes in process `syz.8.3156'. [ 255.282447][T14504] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 255.329898][T14504] EXT4-fs (loop2): 1 truncate cleaned up [ 255.340475][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3157'. [ 255.349527][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3157'. [ 255.350971][T14504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.418164][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.689298][T14524] loop4: detected capacity change from 0 to 512 [ 255.703265][T14493] Set syz1 is full, maxelem 65536 reached [ 255.710207][T14525] loop8: detected capacity change from 0 to 256 [ 255.727218][T14526] loop2: detected capacity change from 0 to 512 [ 255.734499][T14524] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3165: Invalid inode bitmap blk 4 in block_group 0 [ 255.769412][T14529] loop9: detected capacity change from 0 to 128 [ 255.789382][T14524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.809285][T14531] syzkaller0: entered promiscuous mode [ 255.814893][T14531] syzkaller0: entered allmulticast mode [ 255.820845][T14525] FAT-fs (loop8): Directory bread(block 64) failed [ 255.822462][T14526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.845068][T14526] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.851153][T14525] FAT-fs (loop8): Directory bread(block 65) failed [ 255.868956][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.872367][T14525] FAT-fs (loop8): Directory bread(block 66) failed [ 255.884855][T14525] FAT-fs (loop8): Directory bread(block 67) failed [ 255.891548][T14525] FAT-fs (loop8): Directory bread(block 68) failed [ 255.895260][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.898342][T14525] FAT-fs (loop8): Directory bread(block 69) failed [ 255.913872][T14525] FAT-fs (loop8): Directory bread(block 70) failed [ 255.920993][T14525] FAT-fs (loop8): Directory bread(block 71) failed [ 255.927670][T14525] FAT-fs (loop8): Directory bread(block 72) failed [ 255.934409][T14525] FAT-fs (loop8): Directory bread(block 73) failed [ 255.981361][T14541] loop2: detected capacity change from 0 to 1024 [ 256.011580][T14541] EXT4-fs: Ignoring removed nobh option [ 256.015538][ T29] audit: type=1400 audit(1755572318.531:4533): avc: denied { remount } for pid=14544 comm="syz.3.3172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.017299][T14541] EXT4-fs: Ignoring removed bh option [ 256.197930][T14541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.220002][T14556] loop8: detected capacity change from 0 to 4096 [ 256.231196][T14559] loop3: detected capacity change from 0 to 512 [ 256.564524][T14556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.619410][T14556] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3177: corrupted inode contents [ 256.636506][T14556] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.3177: mark_inode_dirty error [ 256.637213][ T6552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.661432][T14556] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3177: corrupted inode contents [ 256.673912][T14556] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3177: mark_inode_dirty error [ 256.702929][T14570] loop2: detected capacity change from 0 to 128 [ 256.707459][T14556] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3177: corrupted inode contents [ 256.724763][T14556] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3177: mark_inode_dirty error [ 256.743052][T14556] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3177: corrupted inode contents [ 256.763980][T14556] EXT4-fs error (device loop8): ext4_truncate:4666: inode #15: comm syz.8.3177: mark_inode_dirty error [ 256.781641][T14556] EXT4-fs error (device loop8) in ext4_setattr:6071: Corrupt filesystem [ 256.790524][T14566] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3177: corrupted inode contents [ 256.950022][ T7408] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 256.967835][T14586] loop9: detected capacity change from 0 to 512 [ 256.974962][ T29] audit: type=1400 audit(1755572319.491:4534): avc: denied { open } for pid=14582 comm="syz.4.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.994425][ T29] audit: type=1400 audit(1755572319.491:4535): avc: denied { kernel } for pid=14582 comm="syz.4.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 257.000770][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.148560][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3190'. [ 257.313156][ T29] audit: type=1400 audit(1755572319.841:4536): avc: denied { write } for pid=14596 comm="syz.4.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 257.406172][T14607] loop8: detected capacity change from 0 to 512 [ 257.461454][T14607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.478709][T14613] loop3: detected capacity change from 0 to 512 [ 257.506491][T14613] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3200: Invalid inode bitmap blk 4 in block_group 0 [ 257.525100][T14607] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.553551][T14613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.569984][T14621] loop9: detected capacity change from 0 to 512 [ 257.706251][T14621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.044406][T14621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.073884][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.100975][T14621] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.166058][T14621] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 258.403832][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.417800][T13181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.432182][T14635] loop2: detected capacity change from 0 to 8192 [ 258.556269][T14647] loop4: detected capacity change from 0 to 736 [ 258.673216][T14653] loop9: detected capacity change from 0 to 2048 [ 258.826435][T14657] loop8: detected capacity change from 0 to 8192 [ 259.218504][ T3293] loop9: p1 < > p4 < > [ 259.246142][T14653] loop9: p1 < > p4 < > [ 259.306997][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 259.320602][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 259.506630][ T29] audit: type=1400 audit(1755572322.031:4537): avc: denied { name_connect } for pid=14691 comm="syz.2.3229" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 259.528694][T14690] loop3: detected capacity change from 0 to 2048 [ 259.591498][T14690] loop3: p1 < > p4 < > [ 259.640186][T14701] loop4: detected capacity change from 0 to 1024 [ 259.679450][T14701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.730624][T14701] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.774322][ T6684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.941396][ C0] hrtimer: interrupt took 29394 ns [ 259.946469][ T29] audit: type=1400 audit(1755572322.471:4538): avc: denied { cpu } for pid=14719 comm="syz.3.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 259.988215][T14721] hub 8-0:1.0: USB hub found [ 259.996463][T14721] hub 8-0:1.0: 8 ports detected [ 260.074399][T14725] loop2: detected capacity change from 0 to 736 [ 260.154210][T14729] netlink: 'syz.3.3243': attribute type 17 has an invalid length. [ 260.162344][T14729] netlink: 'syz.3.3243': attribute type 16 has an invalid length. [ 260.170309][T14729] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3243'. [ 260.209976][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3244'. [ 260.237295][T14734] netlink: 'syz.2.3245': attribute type 13 has an invalid length. [ 260.245201][T14734] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3245'. [ 260.303015][ T29] audit: type=1400 audit(1755572322.831:4539): avc: denied { write } for pid=14732 comm="syz.2.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.401927][T14742] loop9: detected capacity change from 0 to 1024 [ 260.420398][T14747] loop3: detected capacity change from 0 to 1024 [ 260.432098][T14747] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.439373][T14747] EXT4-fs: inline encryption not supported [ 260.449468][T14747] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 260.474335][T14742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.497193][T14747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 260.514454][T14747] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3250: bad orphan inode 11 [ 260.516531][T14742] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.525090][T14747] ext4_test_bit(bit=10, block=4) = 1 [ 260.540459][T14747] is_bad_inode(inode)=0 [ 260.544621][T14747] NEXT_ORPHAN(inode)=3254779904 [ 260.549545][T14747] max_ino=32 [ 260.552754][T14747] i_nlink=0 [ 260.563519][T14747] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3250: lblock 2 mapped to illegal pblock 2 (length 1) [ 260.588852][T14747] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 260.600236][T14747] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3250: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.616032][T14747] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 260.625015][T13181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.625017][T14747] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3250: Failed to acquire dquot type 0 [ 260.652345][T14757] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 260.656125][T14747] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 260.671352][T14747] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3250: mark_inode_dirty error [ 260.703071][T14747] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 260.782575][ T7369] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 260.824573][ T7369] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 260.861187][ T7369] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 261.149865][T14785] loop4: detected capacity change from 0 to 512 [ 261.234784][T14790] loop9: detected capacity change from 0 to 1024 [ 261.243153][T14785] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 261.275039][T14785] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 261.306947][T14785] EXT4-fs (loop4): mount failed [ 261.307508][T14790] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.865016][T14803] loop2: detected capacity change from 0 to 1024 [ 261.921913][T14805] netlink: 'syz.9.3264': attribute type 1 has an invalid length. [ 261.930163][T14803] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.938527][T14803] EXT4-fs: inline encryption not supported [ 261.944981][T14803] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 261.951377][T14805] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 261.972881][T14803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 261.996787][T14803] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3266: bad orphan inode 11 [ 262.010892][T14809] loop9: detected capacity change from 0 to 512 [ 262.017769][T14803] ext4_test_bit(bit=10, block=4) = 1 [ 262.023082][T14803] is_bad_inode(inode)=0 [ 262.027286][T14803] NEXT_ORPHAN(inode)=3254779904 [ 262.032167][T14803] max_ino=32 [ 262.035422][T14803] i_nlink=0 [ 262.084101][T14803] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3266: lblock 2 mapped to illegal pblock 2 (length 1) [ 262.110156][T14803] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 262.119865][T14803] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3266: lblock 0 mapped to illegal pblock 48 (length 1) [ 262.147571][T14803] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 262.156554][T14803] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3266: Failed to acquire dquot type 0 [ 262.169519][T14803] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 262.180796][T14803] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3266: mark_inode_dirty error [ 262.245223][T14803] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 262.349730][T14819] loop8: detected capacity change from 0 to 4096 [ 262.372235][ T6552] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 262.391882][ T6552] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 262.403926][T14819] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3272: corrupted inode contents [ 262.419848][ T6552] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 262.463189][T14830] netlink: 'syz.2.3274': attribute type 1 has an invalid length. [ 262.477279][T14819] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.3272: mark_inode_dirty error [ 262.501285][T14828] loop4: detected capacity change from 0 to 4096 [ 262.514518][T14819] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3272: corrupted inode contents [ 262.529514][T14830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3274'. [ 262.539486][T14830] 8021q: adding VLAN 0 to HW filter on device bond16 [ 262.553948][T14830] veth19: entered promiscuous mode [ 262.563344][T14830] bond16: (slave veth19): Enslaving as a backup interface with a down link [ 262.605886][T14819] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3272: mark_inode_dirty error [ 262.638164][T14819] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3272: corrupted inode contents [ 262.664669][T14819] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3272: mark_inode_dirty error [ 262.667853][T14836] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 262.676240][T14819] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.3272: corrupted inode contents [ 262.701201][T14819] EXT4-fs error (device loop8): ext4_truncate:4666: inode #15: comm syz.8.3272: mark_inode_dirty error [ 262.712799][T14819] EXT4-fs error (device loop8): ext4_evict_inode:265: comm syz.8.3272: couldn't truncate inode 15 (err -117) [ 262.801043][T14842] loop2: detected capacity change from 0 to 1024 [ 262.809986][T14842] EXT4-fs: Ignoring removed nobh option [ 262.815607][T14842] EXT4-fs: Ignoring removed bh option [ 263.383673][ T9652] bridge_slave_1: left allmulticast mode [ 263.389584][ T9652] bridge_slave_1: left promiscuous mode [ 263.395312][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.400992][T14870] netlink: 'syz.9.3289': attribute type 1 has an invalid length. [ 263.443447][ T9652] bridge_slave_0: left allmulticast mode [ 263.449220][ T9652] bridge_slave_0: left promiscuous mode [ 263.454928][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.486111][ T9652] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 263.499717][ T9652] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 263.641166][ T9652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.652711][ T9652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.662483][ T9652] bond0 (unregistering): Released all slaves [ 263.672072][ T9652] bond1 (unregistering): Released all slaves [ 263.683007][ T9652] bond2 (unregistering): (slave veth5): Releasing backup interface [ 263.691799][ T9652] bond2 (unregistering): Released all slaves [ 263.705657][ T9652] bond3 (unregistering): (slave veth7): Releasing backup interface [ 263.716149][ T9652] bond3 (unregistering): Released all slaves [ 263.727045][ T9652] bond4 (unregistering): Released all slaves [ 263.739476][ T9652] bond5 (unregistering): (slave veth9): Releasing backup interface [ 263.748579][ T9652] bond5 (unregistering): Released all slaves [ 263.760243][ T9652] bond6 (unregistering): Released all slaves [ 263.771589][ T9652] bond7 (unregistering): Released all slaves [ 263.783598][ T9652] bond8 (unregistering): Released all slaves [ 263.797732][ T9652] bond9 (unregistering): Released all slaves [ 263.811994][ T9652] bond10 (unregistering): (slave veth15): Releasing backup interface [ 263.822209][ T9652] bond10 (unregistering): Released all slaves [ 263.836190][ T9652] bond11 (unregistering): (slave veth17): Releasing backup interface [ 263.846921][ T9652] bond11 (unregistering): Released all slaves [ 263.860849][ T9652] bond12 (unregistering): Released all slaves [ 263.872702][ T9652] bond13 (unregistering): Released all slaves [ 263.886702][ T9652] bond14 (unregistering): Released all slaves [ 263.900839][ T9652] bond15 (unregistering): Released all slaves [ 263.911882][ T9652] bond16 (unregistering): (slave veth19): Releasing backup interface [ 263.924959][ T9652] bond16 (unregistering): Released all slaves [ 263.935897][ T9652] bond17 (unregistering): Released all slaves [ 264.036584][ T9652] tipc: Left network mode [ 264.104681][ T9652] hsr_slave_0: left promiscuous mode [ 264.139038][ T9652] hsr_slave_1: left promiscuous mode [ 264.186730][ T9652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.199698][ T9652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.301317][ T9652] team0 (unregistering): Port device team_slave_1 removed [ 264.326900][ T9652] team0 (unregistering): Port device team_slave_0 removed [ 264.603727][T14857] chnl_net:caif_netlink_parms(): no params data found [ 264.614977][T14911] syzkaller0: entered promiscuous mode [ 264.620563][T14911] syzkaller0: entered allmulticast mode [ 265.006311][T14857] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.013476][T14857] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.035085][T14857] bridge_slave_0: entered allmulticast mode [ 265.041681][T14857] bridge_slave_0: entered promiscuous mode [ 265.048699][T14857] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.055794][T14857] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.063062][T14857] bridge_slave_1: entered allmulticast mode [ 265.069850][T14857] bridge_slave_1: entered promiscuous mode [ 265.084937][T14926] loop4: detected capacity change from 0 to 4096 [ 265.108855][T14926] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3297: corrupted inode contents [ 265.159198][T14926] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.3297: mark_inode_dirty error [ 265.191519][T14926] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3297: corrupted inode contents [ 265.205850][T14857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.243274][T14857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.252806][T14926] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.3297: mark_inode_dirty error [ 265.304655][T14926] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3297: corrupted inode contents [ 265.316834][T14857] team0: Port device team_slave_0 added [ 265.323658][T14857] team0: Port device team_slave_1 added [ 265.379618][T14926] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.3297: mark_inode_dirty error [ 265.409026][T14926] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3297: corrupted inode contents [ 265.431897][T14857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.439276][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.446679][T14926] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.3297: mark_inode_dirty error [ 265.465329][T14857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.490123][T14857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.497131][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.523184][T14857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.528145][T14926] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 265.562733][T14939] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3297: corrupted inode contents [ 265.599769][ T6684] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 265.610318][T14948] syzkaller0: entered promiscuous mode [ 265.615874][T14948] syzkaller0: entered allmulticast mode [ 265.640917][T14857] hsr_slave_0: entered promiscuous mode [ 265.658589][T14857] hsr_slave_1: entered promiscuous mode [ 265.687737][T14857] debugfs: 'hsr0' already exists in 'hsr' [ 265.693520][T14857] Cannot create hsr debugfs directory [ 265.839048][T14974] pim6reg1: entered promiscuous mode [ 265.844430][T14974] pim6reg1: entered allmulticast mode [ 266.240769][T14857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.258769][T14857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.274793][T14857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.287599][T14857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.716107][T14857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.762316][T14857] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.797000][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.804106][ T9655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.846668][T15038] syzkaller0: entered promiscuous mode [ 266.852197][T15038] syzkaller0: entered allmulticast mode [ 266.895235][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.902413][ T9655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.930133][T15041] veth0_to_team: entered promiscuous mode [ 266.935915][T15041] veth0_to_team: entered allmulticast mode [ 267.281323][T14857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.461897][T15079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3316'. [ 268.189902][ T29] audit: type=1400 audit(1755572330.721:4540): avc: denied { getopt } for pid=15117 comm="syz.4.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.213206][ T29] audit: type=1400 audit(1755572330.731:4541): avc: denied { listen } for pid=15117 comm="syz.4.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.232942][ T29] audit: type=1400 audit(1755572330.731:4542): avc: denied { read } for pid=15117 comm="syz.4.3318" path="socket:[44248]" dev="sockfs" ino=44248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.439319][T14857] veth0_vlan: entered promiscuous mode [ 268.495993][T14857] veth1_vlan: entered promiscuous mode [ 268.650991][T14857] veth0_macvtap: entered promiscuous mode [ 268.669149][T14857] veth1_macvtap: entered promiscuous mode [ 268.682672][T14857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.692341][T14857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.743948][ T4749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.753051][ T4749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.762278][ T4749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.799435][ T4749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.240509][T15171] syzkaller0: entered promiscuous mode [ 269.246057][T15171] syzkaller0: entered allmulticast mode [ 269.480378][T15188] veth0_vlan: entered allmulticast mode [ 269.573748][T15201] veth0_vlan: left promiscuous mode [ 269.586935][T15201] veth0_vlan: entered promiscuous mode [ 269.594581][T15198] pim6reg1: entered promiscuous mode [ 269.600042][T15198] pim6reg1: entered allmulticast mode [ 269.768494][T15210] netlink: 'syz.9.3333': attribute type 1 has an invalid length. [ 269.776804][T15210] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3333'. [ 269.970211][T15215] tipc: New replicast peer: 255.255.255.255 [ 269.976594][T15215] tipc: Enabled bearer , priority 10 [ 270.103660][T15227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.292398][T15243] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3347'. [ 270.455521][T15252] tipc: Enabled bearer , priority 0 [ 270.534951][T15252] syzkaller0: entered promiscuous mode [ 270.540570][T15252] syzkaller0: entered allmulticast mode [ 270.593314][T15252] tipc: Resetting bearer [ 270.611467][T15250] tipc: Resetting bearer [ 270.633973][T15250] tipc: Disabling bearer [ 270.689910][T15263] dvmrp0: entered allmulticast mode [ 270.753834][T15272] netlink: 'syz.9.3359': attribute type 1 has an invalid length. [ 270.784671][T15272] veth5: entered promiscuous mode [ 270.795437][T15272] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 271.118142][T15290] syzkaller0: entered promiscuous mode [ 271.123699][T15290] syzkaller0: entered allmulticast mode [ 271.505998][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 271.506476][ T4755] tipc: Node number set to 3822456887 [ 271.605344][T15326] loop4: detected capacity change from 0 to 512 [ 271.616343][T15324] loop3: detected capacity change from 0 to 4096 [ 271.633636][T15326] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 271.651350][T15326] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.675105][T15324] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3376: corrupted inode contents [ 271.689098][T15324] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.3376: mark_inode_dirty error [ 271.701768][T15324] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3376: corrupted inode contents [ 271.714166][T15326] EXT4-fs (loop4): mount failed [ 271.719332][T15324] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.3376: mark_inode_dirty error [ 271.746966][T15324] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3376: corrupted inode contents [ 271.804663][T15324] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.3376: mark_inode_dirty error [ 271.839217][T15324] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.3376: corrupted inode contents [ 271.854190][T15324] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.3376: mark_inode_dirty error [ 271.877163][T15343] loop9: detected capacity change from 0 to 4096 [ 271.939792][T15324] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 272.113294][T15367] syzkaller0: entered promiscuous mode [ 272.118986][T15367] syzkaller0: entered allmulticast mode [ 272.188371][T15378] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3395'. [ 272.345832][ T29] audit: type=1400 audit(1755572334.871:4543): avc: denied { getopt } for pid=15396 comm="syz.1.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.366992][T15399] loop3: detected capacity change from 0 to 1024 [ 272.375229][T15399] EXT4-fs: Ignoring removed nobh option [ 272.381081][T15399] EXT4-fs: Ignoring removed bh option [ 272.382751][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 272.392898][T15391] loop9: detected capacity change from 0 to 4096 [ 272.410074][T15398] batadv_slave_0: entered promiscuous mode [ 272.418313][T15398] batadv_slave_1: entered promiscuous mode [ 272.424720][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.435295][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.629092][T15410] tipc: Enabling of bearer rejected, failed to enable media [ 272.645142][T15410] syzkaller0: entered promiscuous mode [ 272.650827][T15410] syzkaller0: entered allmulticast mode [ 272.805947][T15426] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 272.841165][T15428] loop4: detected capacity change from 0 to 1024 [ 272.868396][T15426] veth3: entered promiscuous mode [ 272.874754][T15428] EXT4-fs: Ignoring removed nobh option [ 272.880434][T15428] EXT4-fs: Ignoring removed bh option [ 272.977655][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3422'. [ 273.077180][T15415] chnl_net:caif_netlink_parms(): no params data found [ 273.188821][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.196079][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.208431][T15415] bridge_slave_0: entered allmulticast mode [ 273.224160][T15415] bridge_slave_0: entered promiscuous mode [ 273.234437][T15446] veth0_vlan: entered allmulticast mode [ 273.280375][T15460] veth0_vlan: left promiscuous mode [ 273.287149][T15460] veth0_vlan: entered promiscuous mode [ 273.298448][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.305619][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.313231][T15415] bridge_slave_1: entered allmulticast mode [ 273.320564][T15415] bridge_slave_1: entered promiscuous mode [ 273.367378][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.374972][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.382082][T15464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.393163][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.419836][T15467] loop9: detected capacity change from 0 to 512 [ 273.421369][ T4231] bridge_slave_1: left allmulticast mode [ 273.431940][ T4231] bridge_slave_1: left promiscuous mode [ 273.437689][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.460570][ T4231] bridge_slave_0: left allmulticast mode [ 273.466570][ T4231] bridge_slave_0: left promiscuous mode [ 273.472521][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.509185][ T4231] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 273.517636][ T4231] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0e:ff:65:1d:35:b3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.550088][T15481] loop9: detected capacity change from 0 to 1024 [ 273.558407][T15481] EXT4-fs: Ignoring removed nobh option [ 273.564050][T15481] EXT4-fs: Ignoring removed bh option [ 273.602241][ T4231] bond12 (unregistering): (slave geneve2): Releasing active interface [ 273.658720][ T4231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.668291][ T4231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.677460][ T4231] bond0 (unregistering): Released all slaves [ 273.685732][ T4231] bond1 (unregistering): (slave veth3): Releasing backup interface [ 273.694491][ T4231] bond1 (unregistering): Released all slaves [ 273.703387][ T4231] bond2 (unregistering): (slave veth5): Releasing backup interface [ 273.712298][ T4231] bond2 (unregistering): Released all slaves [ 273.721264][ T4231] bond3 (unregistering): (slave veth7): Releasing backup interface [ 273.730082][ T4231] bond3 (unregistering): Released all slaves [ 273.739954][ T4231] bond4 (unregistering): Released all slaves [ 273.748200][ T4231] bond5 (unregistering): Released all slaves [ 273.756754][ T4231] bond6 (unregistering): Released all slaves [ 273.765143][ T4231] bond7 (unregistering): Released all slaves [ 273.774017][ T4231] bond8 (unregistering): Released all slaves [ 273.784235][ T4231] bond9 (unregistering): (slave veth15): Releasing backup interface [ 273.794017][ T4231] bond9 (unregistering): Released all slaves [ 273.804448][ T4231] bond10 (unregistering): Released all slaves [ 273.814922][ T4231] bond11 (unregistering): Released all slaves [ 273.826114][ T4231] bond12 (unregistering): Released all slaves [ 273.838292][ T4231] bond13 (unregistering): Released all slaves [ 273.855422][ T4231] bond14 (unregistering): (slave veth17): Releasing backup interface [ 273.858022][ T29] audit: type=1400 audit(1755572336.381:4544): avc: denied { read } for pid=15493 comm="syz.1.3434" path="socket:[45888]" dev="sockfs" ino=45888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.888955][ T4231] bond14 (unregistering): Released all slaves [ 273.897834][ T4231] bond15 (unregistering): Released all slaves [ 273.906312][ T4231] bond16 (unregistering): Released all slaves [ 273.918941][ T4231] bond17 (unregistering): (slave veth19): Releasing backup interface [ 273.932102][ T4231] bond17 (unregistering): Released all slaves [ 273.941736][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.964453][T15415] team0: Port device team_slave_0 added [ 273.973350][T15415] team0: Port device team_slave_1 added [ 274.033534][T15498] syzkaller0: entered promiscuous mode [ 274.039194][T15498] syzkaller0: entered allmulticast mode [ 274.045633][ T4231] tipc: Disabling bearer [ 274.050975][ T4231] tipc: Left network mode [ 274.053330][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.062413][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.088777][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.107810][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.114865][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.141018][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.259349][T15415] hsr_slave_0: entered promiscuous mode [ 274.269005][T15415] hsr_slave_1: entered promiscuous mode [ 274.275439][T15415] debugfs: 'hsr0' already exists in 'hsr' [ 274.281242][T15415] Cannot create hsr debugfs directory [ 274.369216][ T4231] hsr_slave_0: left promiscuous mode [ 274.394815][ T4231] hsr_slave_1: left promiscuous mode [ 274.433210][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.485166][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.622234][T15510] loop8: detected capacity change from 0 to 512 [ 274.926134][T15515] loop8: detected capacity change from 0 to 4096 [ 274.933130][ T4231] team0 (unregistering): Port device team_slave_1 removed [ 275.091411][T15449] chnl_net:caif_netlink_parms(): no params data found [ 275.244769][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.252001][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.278428][T15449] bridge_slave_0: entered allmulticast mode [ 275.290020][T15449] bridge_slave_0: entered promiscuous mode [ 275.319378][T15449] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.326533][T15449] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.341223][T15449] bridge_slave_1: entered allmulticast mode [ 275.353763][T15449] bridge_slave_1: entered promiscuous mode [ 275.395381][T15449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.426016][T15449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.467344][T15449] team0: Port device team_slave_0 added [ 275.485411][T15449] team0: Port device team_slave_1 added [ 275.524885][T15449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.531909][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.557854][T15449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.569849][T15449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.576848][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.602962][T15449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.632628][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3439'. [ 275.655576][T15449] hsr_slave_0: entered promiscuous mode [ 275.662747][T15449] hsr_slave_1: entered promiscuous mode [ 275.669068][T15449] debugfs: 'hsr0' already exists in 'hsr' [ 275.674966][T15449] Cannot create hsr debugfs directory [ 275.837129][T15574] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3445'. [ 276.611149][T15415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.627695][T15415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.649639][T15415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.677131][T15415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.780859][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3450'. [ 276.831286][T15598] chnl_net:caif_netlink_parms(): no params data found [ 276.855089][T15415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.895401][T15415] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.913836][T15658] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3452'. [ 276.925521][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.932639][ T9651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.993398][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.000602][ T9651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.058472][T15449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.073492][T15598] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.080828][T15598] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.088607][T15598] bridge_slave_0: entered allmulticast mode [ 277.095176][T15598] bridge_slave_0: entered promiscuous mode [ 277.102474][T15449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.118787][T15449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.128187][T15679] loop8: detected capacity change from 0 to 8192 [ 277.139284][T15679] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.153280][T15598] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.160440][T15598] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.176540][T15598] bridge_slave_1: entered allmulticast mode [ 277.183092][T15598] bridge_slave_1: entered promiscuous mode [ 277.205636][T15449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.243205][T15598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.268192][T15598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.323278][T15598] team0: Port device team_slave_0 added [ 277.349548][T15598] team0: Port device team_slave_1 added [ 277.388370][T15598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.395402][T15598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.421922][T15598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.434995][T15709] loop8: detected capacity change from 0 to 8192 [ 277.443171][T15598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.450254][T15598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.476295][T15598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.540242][T15598] hsr_slave_0: entered promiscuous mode [ 277.549356][T15598] hsr_slave_1: entered promiscuous mode [ 277.555297][T15598] debugfs: 'hsr0' already exists in 'hsr' [ 277.561225][T15598] Cannot create hsr debugfs directory [ 277.602098][T15415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.693753][T15449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.732883][T15449] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.776677][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.783824][ T9651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.828978][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.836111][ T9651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.899961][T15748] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3461'. [ 278.008909][T15415] veth0_vlan: entered promiscuous mode [ 278.080198][T15415] veth1_vlan: entered promiscuous mode [ 278.113177][T15415] veth0_macvtap: entered promiscuous mode [ 278.151932][T15415] veth1_macvtap: entered promiscuous mode [ 278.176807][T15415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.202467][T15449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.218132][T15415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.248479][ T9686] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.268160][ T9686] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.318111][ T9686] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.327926][T15598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.341824][ T9686] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.356045][T15598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.373501][T15598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.405533][T15598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.513738][T15808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3466'. [ 278.581514][T15598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.613511][T15598] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.642379][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.649497][ T9651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.663905][T15812] loop7: detected capacity change from 0 to 8192 [ 278.684257][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.691461][ T9652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.777570][T15449] veth0_vlan: entered promiscuous mode [ 278.800595][T15449] veth1_vlan: entered promiscuous mode [ 278.828222][T15833] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3469'. [ 278.847460][T15449] veth0_macvtap: entered promiscuous mode [ 278.860321][T15449] veth1_macvtap: entered promiscuous mode [ 278.910004][T15449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.919039][T15598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.943388][T15449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.980123][ T9677] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.024675][ T9677] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.062916][ T9677] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.079789][T15857] netlink: 'syz.6.3426': attribute type 1 has an invalid length. [ 279.079932][ T9677] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.101646][T15859] loop7: detected capacity change from 0 to 1024 [ 279.119391][T15859] EXT4-fs: Ignoring removed nobh option [ 279.125017][T15859] EXT4-fs: Ignoring removed bh option [ 279.170943][T15859] EXT4-fs mount: 28 callbacks suppressed [ 279.170959][T15859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.233076][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3473'. [ 279.243429][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3473'. [ 279.362512][T15880] loop6: detected capacity change from 0 to 256 [ 279.401598][T15880] FAT-fs (loop6): codepage cp862 not found [ 279.420973][ T29] audit: type=1400 audit(1755572341.861:4545): avc: denied { wake_alarm } for pid=15870 comm="syz.6.3472" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.442370][ T29] audit: type=1400 audit(1755572342.884:4546): avc: denied { setattr } for pid=15870 comm="syz.6.3472" name="NETLINK" dev="sockfs" ino=47878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.724984][T15893] netlink: 'syz.8.3477': attribute type 33 has an invalid length. [ 279.732872][T15893] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3477'. [ 279.787831][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3477'. [ 280.000217][T15415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.162520][T15598] veth0_vlan: entered promiscuous mode [ 280.171460][T15598] veth1_vlan: entered promiscuous mode [ 280.184481][T15598] veth0_macvtap: entered promiscuous mode [ 280.191956][T15598] veth1_macvtap: entered promiscuous mode [ 280.380347][T15598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.394399][T15911] tipc: Started in network mode [ 280.399323][T15911] tipc: Node identity 26e249ba1c6, cluster identity 4711 [ 280.406452][T15911] tipc: Enabled bearer , priority 0 [ 280.526175][T15598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.556286][T15904] syzkaller0: entered promiscuous mode [ 280.561933][T15904] syzkaller0: entered allmulticast mode [ 280.689494][T15907] tipc: Resetting bearer [ 280.696068][ T9686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.720025][ T9686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.729237][ T9686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.738368][ T9686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.764338][T15902] tipc: Resetting bearer [ 280.788190][T15902] tipc: Disabling bearer [ 280.842528][T15928] netlink: 'syz.1.3484': attribute type 4 has an invalid length. [ 280.879702][T15928] netlink: 'syz.1.3484': attribute type 4 has an invalid length. [ 281.009048][T15939] tipc: Enabling of bearer rejected, failed to enable media [ 281.050116][T15939] syzkaller0: entered promiscuous mode [ 281.055674][T15939] syzkaller0: entered allmulticast mode [ 281.079831][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3489'. [ 281.093968][T15934] veth0_vlan: entered allmulticast mode [ 281.220105][T15965] loop8: detected capacity change from 0 to 8192 [ 281.234566][T15965] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.246681][T15949] veth0_vlan: left promiscuous mode [ 281.253782][T15949] veth0_vlan: entered promiscuous mode [ 281.529078][T15909] chnl_net:caif_netlink_parms(): no params data found [ 281.568521][T16010] loop5: detected capacity change from 0 to 512 [ 281.611129][T16010] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 281.635487][T16010] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 281.664962][T15909] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.672309][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.679946][T16010] EXT4-fs (loop5): mount failed [ 281.685093][T15909] bridge_slave_0: entered allmulticast mode [ 281.692393][T15909] bridge_slave_0: entered promiscuous mode [ 281.709731][T15909] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.716868][T15909] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.730510][T15909] bridge_slave_1: entered allmulticast mode [ 281.740605][T15909] bridge_slave_1: entered promiscuous mode [ 281.761812][T16016] tipc: Enabled bearer , priority 0 [ 281.778046][T15909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.787906][T16016] syzkaller0: entered promiscuous mode [ 281.793420][T16016] syzkaller0: entered allmulticast mode [ 281.819319][T16016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.852633][T15909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.862927][T16016] tipc: Resetting bearer [ 281.871896][T16028] veth0_vlan: entered allmulticast mode [ 281.965812][T16015] tipc: Resetting bearer [ 281.977277][T16015] tipc: Disabling bearer [ 281.989784][T16038] veth0_vlan: left promiscuous mode [ 282.013426][T16038] veth0_vlan: entered promiscuous mode [ 282.087348][T15909] team0: Port device team_slave_0 added [ 282.104769][T15909] team0: Port device team_slave_1 added [ 282.174784][T15909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.181983][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.208688][T15909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.271449][T15909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.278521][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.304706][T15909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.431475][T15909] hsr_slave_0: entered promiscuous mode [ 282.442869][T15909] hsr_slave_1: entered promiscuous mode [ 282.453031][T15909] debugfs: 'hsr0' already exists in 'hsr' [ 282.458853][T15909] Cannot create hsr debugfs directory [ 282.663985][T16102] loop8: detected capacity change from 0 to 512 [ 282.681213][T16102] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 282.700819][T16102] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.718199][T16102] EXT4-fs (loop8): mount failed [ 282.789468][T16113] tipc: Started in network mode [ 282.794397][T16113] tipc: Node identity fa79133ec7bf, cluster identity 4711 [ 282.801700][T16113] tipc: Enabled bearer , priority 0 [ 282.831075][T16113] syzkaller0: entered promiscuous mode [ 282.836718][T16113] syzkaller0: entered allmulticast mode [ 282.917486][T16123] loop8: detected capacity change from 0 to 8192 [ 282.932566][T16129] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 282.957832][T16129] tipc: Resetting bearer [ 282.979102][T15909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.998981][T15909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.008495][T15909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.025761][T15909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.046225][T16112] tipc: Resetting bearer [ 283.060613][T16112] tipc: Disabling bearer [ 283.315441][T16145] netlink: 'syz.1.3519': attribute type 1 has an invalid length. [ 283.360676][T15909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.497929][T16148] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 283.544091][T16156] veth3: entered promiscuous mode [ 283.550936][T16156] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 283.563144][T15909] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.647586][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.654721][ T4749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.737435][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.744556][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.765043][T15909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.775645][T15909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.271635][T16191] tipc: Started in network mode [ 285.276593][T16191] tipc: Node identity e2a7bc8f9128, cluster identity 4711 [ 285.283771][T16191] tipc: Enabled bearer , priority 0 [ 285.328739][T16191] syzkaller0: entered promiscuous mode [ 285.334270][T16191] syzkaller0: entered allmulticast mode [ 285.351353][T16191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.376664][T16191] tipc: Resetting bearer [ 285.386724][T16190] tipc: Resetting bearer [ 285.411789][T16190] tipc: Disabling bearer [ 286.196530][T15909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.261101][T16316] netlink: 'syz.6.3535': attribute type 1 has an invalid length. [ 286.375878][T15909] veth0_vlan: entered promiscuous mode [ 286.485143][T15909] veth1_vlan: entered promiscuous mode [ 286.586001][T16345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3540'. [ 287.321360][T15909] veth0_macvtap: entered promiscuous mode [ 287.329148][T15909] veth1_macvtap: entered promiscuous mode [ 287.346950][T16334] veth3: entered promiscuous mode [ 287.432755][T15909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.467186][T15909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.659037][ T9655] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.172974][ T9655] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.182194][ T9655] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.191356][ T9655] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.208009][ T29] audit: type=1326 audit(1755572351.274:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.8.3541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x0 [ 289.720460][T16431] netlink: 'syz.8.3553': attribute type 1 has an invalid length. [ 289.777076][T16431] veth9: entered promiscuous mode [ 289.784473][T16431] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 289.841984][T16438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.912411][T16438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.065028][T16468] loop5: detected capacity change from 0 to 2048 [ 291.130011][T16472] loop8: detected capacity change from 0 to 512 [ 291.155641][T16472] EXT4-fs: Ignoring removed i_version option [ 291.208241][T16468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.624152][T16468] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.662053][T16472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.715838][ T29] audit: type=1400 audit(1755572355.224:4548): avc: denied { append } for pid=16482 comm="syz.1.3565" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 291.934513][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.641522][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.855110][T16552] bridge: RTM_NEWNEIGH with invalid ether address [ 293.936030][T16561] tipc: Enabled bearer , priority 0 [ 293.975393][T16561] syzkaller0: entered promiscuous mode [ 293.981056][T16561] syzkaller0: entered allmulticast mode [ 294.013035][T16574] loop5: detected capacity change from 0 to 256 [ 294.044426][T16561] tipc: Resetting bearer [ 294.064469][T16559] tipc: Resetting bearer [ 294.081084][T16559] tipc: Disabling bearer [ 294.284799][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3588'. [ 296.458138][T16619] loop6: detected capacity change from 0 to 512 [ 296.537107][T16621] loop8: detected capacity change from 0 to 512 [ 296.583028][T16621] EXT4-fs: Ignoring removed i_version option [ 297.304129][T16632] loop0: detected capacity change from 0 to 512 [ 297.315897][T16619] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 297.359990][T16632] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3599: corrupted in-inode xattr: invalid ea_ino [ 297.373728][T16619] EXT4-fs (loop6): 1 truncate cleaned up [ 297.380264][T16619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.411209][T16632] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3599: couldn't read orphan inode 15 (err -117) [ 297.432277][T16632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.508977][T15909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.767076][T16621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.887623][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.935815][T15449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.007960][T16650] loop8: detected capacity change from 0 to 512 [ 298.153468][T16650] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 298.576493][T16650] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.603081][T16650] EXT4-fs (loop8): mount failed [ 298.610432][T16669] veth0_vlan: entered allmulticast mode [ 299.145187][T16714] loop0: detected capacity change from 0 to 512 [ 299.162101][T16714] EXT4-fs: inline encryption not supported [ 299.263626][T16714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.301210][T16714] EXT4-fs (loop0): 1 truncate cleaned up [ 299.369486][T16723] loop5: detected capacity change from 0 to 512 [ 299.376331][T16723] EXT4-fs: Ignoring removed i_version option [ 299.397430][T16723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.909418][T16726] loop6: detected capacity change from 0 to 256 [ 300.062325][T16726] FAT-fs (loop6): IO charset cp863 not found [ 300.263561][T16714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.291077][ T29] audit: type=1400 audit(1755572363.814:4549): avc: denied { mount } for pid=16725 comm="syz.6.3615" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 300.292126][T15909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.591182][T16736] loop0: detected capacity change from 0 to 512 [ 300.667559][T16736] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 300.694818][T16736] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 301.319988][ T29] audit: type=1326 audit(1755572364.794:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f1cebe9 code=0x7ffc0000 [ 301.343698][ T29] audit: type=1326 audit(1755572364.794:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f1cebe9 code=0x7ffc0000 [ 301.367220][ T29] audit: type=1326 audit(1755572364.794:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff81f1cebe9 code=0x7ffc0000 [ 301.390700][ T29] audit: type=1326 audit(1755572364.794:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f1cebe9 code=0x7ffc0000 [ 301.414327][ T29] audit: type=1326 audit(1755572364.794:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f1cebe9 code=0x7ffc0000 [ 301.437860][ T29] audit: type=1326 audit(1755572364.794:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff81f2014a5 code=0x7ffc0000 [ 301.461354][ T29] audit: type=1326 audit(1755572364.804:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff81f1cebe9 code=0x7ffc0000 [ 301.709173][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.818257][T16736] EXT4-fs (loop0): mount failed [ 303.191914][T16772] loop5: detected capacity change from 0 to 2048 [ 303.267049][T16772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.300298][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 303.300398][ T29] audit: type=1400 audit(1755572366.814:4611): avc: denied { setopt } for pid=16779 comm="syz.8.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.326617][ T29] audit: type=1400 audit(1755572366.814:4612): avc: denied { getopt } for pid=16779 comm="syz.8.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.389158][T16782] tipc: Enabling of bearer rejected, failed to enable media [ 303.409350][T16782] syzkaller0: entered promiscuous mode [ 303.414851][T16782] syzkaller0: entered allmulticast mode [ 303.458937][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.635358][ T29] audit: type=1400 audit(1755572367.154:4613): avc: denied { write } for pid=16786 comm="syz.8.3635" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.726444][T16788] loop5: detected capacity change from 0 to 512 [ 303.901449][T16788] EXT4-fs (loop5): orphan cleanup on readonly fs [ 303.909775][T16788] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3634: bad orphan inode 13 [ 303.922349][T16788] ext4_test_bit(bit=12, block=18) = 1 [ 303.927820][T16788] is_bad_inode(inode)=0 [ 303.932093][T16788] NEXT_ORPHAN(inode)=2130706432 [ 303.937050][T16788] max_ino=32 [ 303.940371][T16788] i_nlink=1 [ 303.944270][T16788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.119953][T16791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.151810][T16791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.563125][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.587119][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.231399][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.589498][T16822] loop8: detected capacity change from 0 to 512 [ 305.623172][T16822] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3646: bg 0: block 393: padding at end of block bitmap is not set [ 305.640025][T16822] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 305.651487][T16822] EXT4-fs (loop8): 2 truncates cleaned up [ 305.657989][T16822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.685270][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'. [ 307.047906][T16843] loop6: detected capacity change from 0 to 512 [ 307.137548][T16843] EXT4-fs (loop6): #blocks per group too big: 466944 [ 307.689796][ T29] audit: type=1326 audit(1755572371.214:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 307.713412][ T29] audit: type=1326 audit(1755572371.214:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 307.826135][ T29] audit: type=1326 audit(1755572371.264:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 307.849335][T16857] SELinux: Context Ü is not valid (left unmapped). [ 307.849792][ T29] audit: type=1326 audit(1755572371.264:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 307.879876][ T29] audit: type=1326 audit(1755572371.264:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 307.903409][ T29] audit: type=1326 audit(1755572371.264:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 307.927199][ T29] audit: type=1326 audit(1755572371.264:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.051360][T16859] loop5: detected capacity change from 0 to 512 [ 308.111100][T16859] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3658: bg 0: block 393: padding at end of block bitmap is not set [ 308.159462][T16859] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 308.192149][T16859] EXT4-fs (loop5): 2 truncates cleaned up [ 308.211813][T16859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.270747][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.529470][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.531169][T16875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3660'. [ 308.591843][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 308.591860][ T29] audit: type=1326 audit(1755572372.114:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.641083][ T29] audit: type=1326 audit(1755572372.114:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.664783][ T29] audit: type=1326 audit(1755572372.114:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.688330][ T29] audit: type=1326 audit(1755572372.114:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.712036][ T29] audit: type=1326 audit(1755572372.114:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.735593][ T29] audit: type=1326 audit(1755572372.114:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.759299][ T29] audit: type=1326 audit(1755572372.114:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.782846][ T29] audit: type=1326 audit(1755572372.114:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.806469][ T29] audit: type=1326 audit(1755572372.114:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.829999][ T29] audit: type=1326 audit(1755572372.114:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.5.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f236eddebe9 code=0x7ffc0000 [ 308.995042][T16887] netlink: 'syz.6.3668': attribute type 4 has an invalid length. [ 309.027978][T16887] netlink: 'syz.6.3668': attribute type 4 has an invalid length. [ 310.156085][T16914] tipc: Enabled bearer , priority 0 [ 310.202327][T16914] syzkaller0: entered promiscuous mode [ 310.207989][T16914] syzkaller0: entered allmulticast mode [ 310.323624][T16914] tipc: Resetting bearer [ 310.351915][T16913] tipc: Resetting bearer [ 311.242449][T16949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.254654][T16949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.271137][T16913] tipc: Disabling bearer [ 311.277735][ T3409] tipc: Node number set to 1938799759 [ 311.291153][T16951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.299901][T16951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.384002][T16961] netlink: 'syz.5.3688': attribute type 1 has an invalid length. [ 311.462950][T16970] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 311.483161][T16961] veth3: entered promiscuous mode [ 311.492059][T16961] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 312.290706][T16995] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 312.290706][T16995] program syz.1.3694 not setting count and/or reply_len properly [ 313.418203][T16990] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 313.426228][T16990] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.442661][T17000] tipc: Enabled bearer , priority 0 [ 313.452741][T17007] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 313.464107][T17000] syzkaller0: entered promiscuous mode [ 313.469765][T17000] syzkaller0: entered allmulticast mode [ 313.479752][T17000] tipc: Resetting bearer [ 313.493362][T16999] tipc: Resetting bearer [ 313.501120][T16999] tipc: Disabling bearer [ 313.514647][T17007] veth5: entered promiscuous mode [ 313.521263][T17007] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 315.533508][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 315.533525][ T29] audit: type=1400 audit(1755572378.674:4705): avc: denied { write } for pid=17029 comm="syz.0.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.222718][T17047] tipc: Enabled bearer , priority 0 [ 316.261511][T17047] syzkaller0: entered promiscuous mode [ 316.267437][T17047] syzkaller0: entered allmulticast mode [ 316.292610][T17047] tipc: Resetting bearer [ 316.318616][T17045] tipc: Resetting bearer [ 316.327010][T17045] tipc: Disabling bearer [ 317.815497][T17076] loop0: detected capacity change from 0 to 1024 [ 317.822402][T17076] EXT4-fs: Ignoring removed bh option [ 317.827912][T17076] EXT4-fs: inline encryption not supported [ 318.457623][T17076] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.520206][T17076] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3723: lblock 2 mapped to illegal pblock 2 (length 1) [ 318.535034][T17076] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 318.543338][T17076] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3723: lblock 0 mapped to illegal pblock 48 (length 1) [ 318.558362][T17076] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 318.567219][T17076] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3723: Failed to acquire dquot type 0 [ 318.583921][T17076] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 318.594027][T17076] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3723: mark_inode_dirty error [ 318.606434][T17076] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 318.616805][T17076] EXT4-fs (loop0): 1 orphan inode deleted [ 318.624396][T17076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.637579][ T9695] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 318.765776][ T29] audit: type=1400 audit(1755572382.274:4706): avc: denied { setopt } for pid=17069 comm="syz.0.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 319.049608][T17081] loop8: detected capacity change from 0 to 764 [ 319.083338][ T9695] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 319.091849][ T9695] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 0 [ 319.122531][T17086] loop5: detected capacity change from 0 to 1024 [ 319.286999][T17081] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 319.297215][T17086] EXT4-fs: Ignoring removed nobh option [ 319.302835][T17086] EXT4-fs: Ignoring removed bh option [ 320.028457][T17086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.260601][T15909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.261982][ T29] audit: type=1400 audit(1755572383.784:4707): avc: denied { mounton } for pid=17085 comm="syz.5.3727" path="/64/file1/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.314914][T15909] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 320.355739][T17107] loop6: detected capacity change from 0 to 512 [ 320.427977][T17107] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3730: bg 0: block 393: padding at end of block bitmap is not set [ 320.445301][T17107] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 320.455581][T17107] EXT4-fs (loop6): 2 truncates cleaned up [ 320.462868][T17107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.549995][T15909] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 320.579573][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.703311][T15909] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 320.773250][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.852044][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.443502][T17124] syz_tun: entered allmulticast mode [ 321.538916][T17123] syz_tun: left allmulticast mode [ 321.917333][ T29] audit: type=1400 audit(1755572385.354:4708): avc: denied { lock } for pid=17128 comm="syz.0.3741" path="socket:[50748]" dev="sockfs" ino=50748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 322.011192][T17138] loop0: detected capacity change from 0 to 1024 [ 322.026676][T17138] EXT4-fs: Ignoring removed nobh option [ 322.029339][T17142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.032335][T17138] EXT4-fs: Ignoring removed bh option [ 322.051526][T17142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.072274][T17138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.134352][T15909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.417928][T17153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3749'. [ 323.169181][T15449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.451882][T17170] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 323.637125][T17177] syzkaller0: entered promiscuous mode [ 323.642696][T17177] syzkaller0: entered allmulticast mode [ 324.352909][T17196] tipc: Started in network mode [ 324.357860][T17196] tipc: Node identity 52cf0637c7ca, cluster identity 4711 [ 324.365222][T17196] tipc: Enabled bearer , priority 0 [ 324.374934][T17196] syzkaller0: entered promiscuous mode [ 324.380588][T17196] syzkaller0: entered allmulticast mode [ 324.393708][T17196] tipc: Resetting bearer [ 324.406665][T17195] tipc: Resetting bearer [ 324.414253][T17195] tipc: Disabling bearer [ 324.516790][T17200] loop5: detected capacity change from 0 to 512 [ 324.629266][T17203] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3767'. [ 324.638357][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3767'. [ 325.027751][T17200] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3765: bg 0: block 393: padding at end of block bitmap is not set [ 325.043258][T17200] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 325.053471][T17200] EXT4-fs (loop5): 2 truncates cleaned up [ 325.060782][T17200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.391247][T17218] loop8: detected capacity change from 0 to 512 [ 327.359420][T17218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.391544][T17218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.789705][T17215] loop6: detected capacity change from 0 to 128 [ 328.212179][T17218] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.377079][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.391947][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.409222][T17235] tipc: Enabled bearer , priority 0 [ 328.506870][T17235] syzkaller0: entered promiscuous mode [ 328.512410][T17235] syzkaller0: entered allmulticast mode [ 328.551823][T17235] tipc: Resetting bearer [ 328.559778][T17234] tipc: Resetting bearer [ 328.569312][T17234] tipc: Disabling bearer [ 329.455063][T17265] loop6: detected capacity change from 0 to 512 [ 329.483769][T17265] EXT4-fs (loop6): orphan cleanup on readonly fs [ 329.490881][T17265] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3787: bad orphan inode 13 [ 330.704647][T17268] loop5: detected capacity change from 0 to 512 [ 331.179788][T17268] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3788: bg 0: block 393: padding at end of block bitmap is not set [ 331.209031][T17268] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 331.220910][T17268] EXT4-fs (loop5): 2 truncates cleaned up [ 331.227583][T17268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.273629][T17265] ext4_test_bit(bit=12, block=18) = 1 [ 331.279134][T17265] is_bad_inode(inode)=0 [ 331.283300][T17265] NEXT_ORPHAN(inode)=2130706432 [ 331.288228][T17265] max_ino=32 [ 331.291428][T17265] i_nlink=1 [ 331.296025][T17265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.577044][T15449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.445477][T17279] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3793'. [ 332.509111][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.804601][ T29] audit: type=1326 audit(1755572396.854:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.5.3805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x0 [ 333.824806][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3798'. [ 334.397910][T17342] loop6: detected capacity change from 0 to 512 [ 334.431790][T17342] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 334.532555][T17342] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 334.556680][T17342] EXT4-fs (loop6): mount failed [ 337.418792][ T29] audit: type=1326 audit(1755572400.464:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17372 comm="syz.5.3826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f236eddebe9 code=0x0 [ 338.640731][T17405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.723680][T17405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.871447][ T29] audit: type=1326 audit(1755572402.374:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 338.895265][ T29] audit: type=1326 audit(1755572402.384:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 338.918881][ T29] audit: type=1326 audit(1755572402.384:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 338.942375][ T29] audit: type=1326 audit(1755572402.384:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 338.965951][ T29] audit: type=1326 audit(1755572402.384:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 338.989615][ T29] audit: type=1326 audit(1755572402.384:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6fbcd14a5 code=0x7ffc0000 [ 339.013187][ T29] audit: type=1326 audit(1755572402.384:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 339.036908][ T29] audit: type=1326 audit(1755572402.384:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 339.060680][ T29] audit: type=1326 audit(1755572402.384:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 339.084201][ T29] audit: type=1326 audit(1755572402.384:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17407 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe6fbc9ebe9 code=0x7ffc0000 [ 339.560134][T17429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3838'. [ 339.991240][T17441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.067199][T17441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.141180][T17441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.201526][T17441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.285918][ T9676] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.381595][ T9676] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.443064][ T9676] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.453167][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3856'. [ 340.468478][ T9676] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.661724][T17465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.673573][T17465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.684788][T17465] loop8: detected capacity change from 0 to 512 [ 340.708948][T17465] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3861: Invalid inode bitmap blk 4 in block_group 0 [ 340.736725][T17465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.881142][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3867'. [ 340.924638][T17481] loop5: detected capacity change from 0 to 764 [ 341.033520][T17487] Symlink component flag not implemented [ 341.039429][T17487] Symlink component flag not implemented [ 341.065632][T17487] Symlink component flag not implemented (128) [ 341.072020][T17487] Symlink component flag not implemented (122) [ 341.326312][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.618958][T17501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3870'. [ 341.866016][T17510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.900796][T17510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.052079][T17524] netlink: 'syz.8.3882': attribute type 1 has an invalid length. [ 343.076437][T17524] veth11: entered promiscuous mode [ 343.084012][T17524] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 344.010132][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 344.010226][ T29] audit: type=1326 audit(1755572407.514:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.039991][ T29] audit: type=1326 audit(1755572407.514:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.063658][ T29] audit: type=1326 audit(1755572407.514:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.087283][ T29] audit: type=1326 audit(1755572407.524:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.110810][ T29] audit: type=1326 audit(1755572407.524:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.134381][ T29] audit: type=1326 audit(1755572407.524:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7e44414a5 code=0x7ffc0000 [ 344.158061][ T29] audit: type=1326 audit(1755572407.524:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.181670][ T29] audit: type=1326 audit(1755572407.524:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.205289][ T29] audit: type=1326 audit(1755572407.524:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 344.228798][ T29] audit: type=1326 audit(1755572407.524:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.8.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 345.671287][T17553] tipc: Enabled bearer , priority 0 [ 345.699205][T17553] syzkaller0: entered promiscuous mode [ 345.704741][T17553] syzkaller0: entered allmulticast mode [ 345.738188][T17552] tipc: Resetting bearer [ 345.745149][T17552] tipc: Disabling bearer [ 345.867175][T17572] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3898'. [ 345.939570][T17574] loop0: detected capacity change from 0 to 512 [ 347.516713][T17574] EXT4-fs (loop0): orphan cleanup on readonly fs [ 347.523839][T17574] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3894: bad orphan inode 13 [ 347.534183][T17574] ext4_test_bit(bit=12, block=18) = 1 [ 347.539605][T17574] is_bad_inode(inode)=0 [ 347.543776][T17574] NEXT_ORPHAN(inode)=2130706432 [ 347.548656][T17574] max_ino=32 [ 347.551862][T17574] i_nlink=1 [ 347.555429][T17574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.778928][T15909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.566683][T17601] tipc: Enabled bearer , priority 0 [ 348.597264][T17609] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 349.077351][T17601] tipc: Resetting bearer [ 349.088448][T17611] bond1 (unregistering): Released all slaves [ 349.114445][T17600] tipc: Disabling bearer [ 349.684516][T17645] loop0: detected capacity change from 0 to 512 [ 349.691450][T17645] EXT4-fs: Ignoring removed i_version option [ 350.155929][T17645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.182080][T17647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3911'. [ 350.436911][T15909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.561853][T17655] tipc: Enabled bearer , priority 0 [ 350.594043][T17655] tipc: Resetting bearer [ 350.698608][T17653] tipc: Disabling bearer [ 350.710183][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 350.710213][ T29] audit: type=1326 audit(1755572414.194:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.740179][ T29] audit: type=1326 audit(1755572414.194:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.763773][ T29] audit: type=1326 audit(1755572414.194:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.787328][ T29] audit: type=1326 audit(1755572414.204:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.810867][ T29] audit: type=1326 audit(1755572414.204:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.834505][ T29] audit: type=1326 audit(1755572414.204:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17660 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7e44414a5 code=0x7ffc0000 [ 350.858251][ T29] audit: type=1326 audit(1755572414.204:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.881732][ T29] audit: type=1326 audit(1755572414.204:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.905421][ T29] audit: type=1326 audit(1755572414.204:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 350.929018][ T29] audit: type=1326 audit(1755572414.204:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.8.3925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fd7e440ebe9 code=0x7ffc0000 [ 351.863787][T17689] loop8: detected capacity change from 0 to 512 [ 351.870487][T17689] EXT4-fs: Ignoring removed i_version option [ 351.976909][T17689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.144532][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.232243][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3945'. [ 353.304698][T17716] loop8: detected capacity change from 0 to 512 [ 353.328804][T17716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.352323][T17719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.363505][T17719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.371862][T17716] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.442421][ T7408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.562094][T17728] loop5: detected capacity change from 0 to 1024 [ 353.572619][T17728] EXT4-fs: Ignoring removed nobh option [ 353.578357][T17728] EXT4-fs: Ignoring removed bh option [ 353.620256][T17728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.179604][T17742] loop6: detected capacity change from 0 to 764 [ 354.208842][T17742] Symlink component flag not implemented [ 354.214821][T17742] Symlink component flag not implemented [ 354.220645][T17742] Symlink component flag not implemented (128) [ 354.226981][T17742] Symlink component flag not implemented (122) [ 354.287872][T15598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.376591][T17750] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 355.245816][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3963'. [ 355.330283][T17765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.436055][T17765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.483442][T17768] syz_tun: entered allmulticast mode [ 355.588815][T17772] loop6: detected capacity change from 0 to 1024 [ 355.595789][T17772] EXT4-fs: Ignoring removed bh option [ 355.620987][T17772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.633305][T17776] loop0: detected capacity change from 0 to 764 [ 355.670944][T17776] Symlink component flag not implemented [ 355.676696][T17776] Symlink component flag not implemented [ 355.684286][T17776] Symlink component flag not implemented (128) [ 355.688639][T15449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.690552][T17776] Symlink component flag not implemented (122) [ 355.852969][T17771] chnl_net:caif_netlink_parms(): no params data found [ 355.873105][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 355.873120][ T29] audit: type=1400 audit(1755572419.394:5002): avc: denied { write } for pid=17795 comm="syz.8.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.113427][T17771] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.120705][T17771] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.268150][T17771] bridge_slave_0: entered allmulticast mode [ 356.277137][T17771] bridge_slave_0: entered promiscuous mode [ 356.304327][T17771] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.311527][T17771] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.981556][T17771] bridge_slave_1: entered allmulticast mode [ 356.988390][T17771] bridge_slave_1: entered promiscuous mode [ 357.010015][T17771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.020776][T17771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.073714][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3977'. [ 357.096069][T17771] team0: Port device team_slave_0 added [ 357.170056][T17771] team0: Port device team_slave_1 added [ 357.202409][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3979'. [ 357.220839][T17771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.227904][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.253968][T17771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.277073][T17827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.280747][T17771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.292483][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.318469][T17771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.319887][T17827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.389711][T17771] hsr_slave_0: entered promiscuous mode [ 357.406192][T17771] hsr_slave_1: entered promiscuous mode [ 357.412229][T17771] debugfs: 'hsr0' already exists in 'hsr' [ 357.418018][T17771] Cannot create hsr debugfs directory [ 358.254686][T17844] loop6: detected capacity change from 0 to 512 [ 359.172691][T17844] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3985: bg 0: block 393: padding at end of block bitmap is not set [ 359.188360][T17844] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 359.201323][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3981'. [ 359.210722][T17844] EXT4-fs (loop6): 2 truncates cleaned up [ 359.217789][T17844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.831540][T17771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.934935][T17771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.061562][T17771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.078978][T17771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.085264][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3990'. [ 360.131617][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 360.249926][T17771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.438260][T17771] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.544989][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.552105][ T9637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.701735][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.709151][ T9637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.012790][T17771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.223566][T15449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.407728][T17771] veth0_vlan: entered promiscuous mode [ 361.449323][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4002'. [ 361.464350][T17771] veth1_vlan: entered promiscuous mode [ 361.605310][T17771] veth0_macvtap: entered promiscuous mode [ 361.623220][T17771] veth1_macvtap: entered promiscuous mode [ 362.001516][T17771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.055448][T17771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.084941][ T9695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.118052][ T9695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.155971][ T9695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.186285][ T9695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.254761][T18033] serio: Serial port ptm0 [ 363.389859][T18036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4013'. [ 363.485860][T18053] tipc: Enabled bearer , priority 0 [ 363.549218][T18053] syzkaller0: entered promiscuous mode [ 363.554744][T18053] syzkaller0: entered allmulticast mode [ 363.714723][T18053] tipc: Resetting bearer [ 363.810660][T18052] tipc: Resetting bearer [ 363.842072][T18052] tipc: Disabling bearer [ 364.082555][T18078] loop2: detected capacity change from 0 to 512 [ 364.105199][T18078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 364.112476][T18078] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.4021: bad orphan inode 13 [ 364.123963][T18078] ext4_test_bit(bit=12, block=18) = 1 [ 364.129470][T18078] is_bad_inode(inode)=0 [ 364.133653][T18078] NEXT_ORPHAN(inode)=2130706432 [ 364.138547][T18078] max_ino=32 [ 364.141749][T18078] i_nlink=1 [ 364.145937][T18078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.476524][T18111] veth0_vlan: left promiscuous mode [ 365.486794][T17771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.496814][T18111] veth0_vlan: entered promiscuous mode [ 365.643213][T18133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.311166][T18177] tipc: Enabled bearer , priority 0 [ 366.322076][T18172] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.345988][T18177] syzkaller0: entered promiscuous mode [ 366.351639][T18177] syzkaller0: entered allmulticast mode [ 366.371099][T18177] tipc: Resetting bearer [ 366.384279][T18180] loop6: detected capacity change from 0 to 512 [ 366.391159][T18180] EXT4-fs: Ignoring removed i_version option [ 366.408978][T18183] dvmrp8: entered allmulticast mode [ 366.414854][T18180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.448850][T18176] tipc: Resetting bearer [ 366.459133][T15449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.468904][T18176] tipc: Disabling bearer [ 366.489085][T18185] veth0_vlan: entered allmulticast mode [ 366.601430][T18200] ================================================================== [ 366.609583][T18200] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 366.618563][T18200] [ 366.620892][T18200] read to 0xffff88811f6036a0 of 4 bytes by task 18205 on cpu 1: [ 366.628551][T18200] selinux_inode_permission+0x334/0x740 [ 366.634124][T18200] security_inode_permission+0x6d/0xb0 [ 366.639599][T18200] inode_permission+0x106/0x310 [ 366.644466][T18200] link_path_walk+0x63c/0x900 [ 366.649158][T18200] path_lookupat+0x63/0x2a0 [ 366.653674][T18200] do_o_path+0x45/0x130 [ 366.657843][T18200] path_openat+0x1df9/0x2170 [ 366.662437][T18200] do_filp_open+0x109/0x230 [ 366.666947][T18200] io_openat2+0x272/0x390 [ 366.671290][T18200] io_openat+0x1b/0x30 [ 366.675369][T18200] __io_issue_sqe+0xfe/0x2e0 [ 366.679960][T18200] io_issue_sqe+0x53/0x970 [ 366.684468][T18200] io_wq_submit_work+0x3f7/0x5f0 [ 366.689450][T18200] io_worker_handle_work+0x44e/0x9b0 [ 366.694741][T18200] io_wq_worker+0x22e/0x870 [ 366.699250][T18200] ret_from_fork+0xda/0x150 [ 366.703763][T18200] ret_from_fork_asm+0x1a/0x30 [ 366.708533][T18200] [ 366.710870][T18200] write to 0xffff88811f6036a0 of 4 bytes by task 18200 on cpu 0: [ 366.718591][T18200] selinux_inode_permission+0x3ac/0x740 [ 366.724155][T18200] security_inode_permission+0x6d/0xb0 [ 366.729629][T18200] inode_permission+0x106/0x310 [ 366.734502][T18200] link_path_walk+0x162/0x900 [ 366.739222][T18200] path_lookupat+0x63/0x2a0 [ 366.743740][T18200] do_o_path+0x45/0x130 [ 366.747917][T18200] path_openat+0x1df9/0x2170 [ 366.752525][T18200] do_filp_open+0x109/0x230 [ 366.757029][T18200] io_openat2+0x272/0x390 [ 366.761367][T18200] io_openat+0x1b/0x30 [ 366.765447][T18200] __io_issue_sqe+0xfe/0x2e0 [ 366.770043][T18200] io_issue_sqe+0x53/0x970 [ 366.774466][T18200] io_submit_sqes+0x664/0x1050 [ 366.779231][T18200] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 366.784782][T18200] __x64_sys_io_uring_enter+0x78/0x90 [ 366.790158][T18200] x64_sys_call+0x2de1/0x2ff0 [ 366.794946][T18200] do_syscall_64+0xd2/0x200 [ 366.799470][T18200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.805374][T18200] [ 366.807702][T18200] value changed: 0x00000002 -> 0x00000003 [ 366.813416][T18200] [ 366.815740][T18200] Reported by Kernel Concurrency Sanitizer on: [ 366.821904][T18200] CPU: 0 UID: 0 PID: 18200 Comm: syz.1.4053 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 366.834414][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.844473][T18200] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.870389][T18204] loop6: detected capacity change from 0 to 512 [ 366.924863][ T29] audit: type=1400 audit(1755572430.384:5003): avc: denied { write } for pid=3290 comm="syz-executor" path="pipe:[434]" dev="pipefs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 366.926783][T18204] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 366.961112][T18191] veth0_vlan: left promiscuous mode [ 367.026274][T18191] veth0_vlan: entered promiscuous mode [ 367.137089][T15909] syz_tun (unregistering): left allmulticast mode