last executing test programs: 33.639399116s ago: executing program 3: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@private, 0x0, 0x32}, 0x0, @in=@empty}, {{@in6=@ipv4}}]}]}, 0x19f}}, 0x0) 33.374981286s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000000000000b700000083001300bf09"], &(0x7f0000000680)='syzkaller\x00', 0xff}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050200000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000019000500050002000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000000)={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x3) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r8, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000290095385b733795a2361906fec3c723fd"], 0x30}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="545d457a4db381b1301f1b36ae82e0168f7ca91913ca200f6090e7964f3e68df8cf9af5c021eaeb3ffcc3d0b379b7b341159235ef56a7a86fec021976cb6813542e023f17900000000d899b04237b4eb3d58501493e4a4127da49978a2f8a95d08118063b28b3889e36e78aca68cf207a3a51b198606a64e72c190a5b7afed4da780c5ddf3d8fab73a9057319f3e4c87c12cb5a95ae977c9f0670ec2be4346be90e961e079a915de8ecd58f1777894688c36369ef9a228c1f225fe3043e4eefa30c3065666dd1e59678a983428478ef16ee1cdf5f5d53e70b8d9c9", @ANYRES16=r6, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES8=0x0, @ANYRESHEX], 0x4c}}, 0x0) setresuid(0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000a9a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 32.768692848s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x6, 0x0, 0xa}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 32.647572767s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x48}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) syz_emit_ethernet(0x34e, &(0x7f00000000c0)=ANY=[], 0x0) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@data_err_ignore}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@discard}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000c40)='./file0\x00') r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x5, 0x9}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000000280)=[{{&(0x7f00000026c0)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000340)="c796bab467f3068794dee57f04a0caa16edf5059d79b2fa8324cb02707eb0410aba9", 0x22}], 0x1}}], 0x2, 0x8008801) write$binfmt_script(r8, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) fcntl$notify(r5, 0x402, 0x0) 31.952478393s ago: executing program 3: socket(0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b2", 0x1}], 0x1}}], 0x1, 0x20000040) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0xd37, 0x6a9d, 0x0, 0x0, 0x0) 29.339643022s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f0000000140), &(0x7f0000000240)=0x4) 29.291033799s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) getuid() (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) mount$bind(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x200000, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) (async) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0x9, 0xfffffffffffffd31}, @exp_fastopen={0xfe, 0x0, 0xf989, "16978714a4b4361e74e9"}, @generic={0x0, 0xfffffffffffffd1b, "d58838068b91"}]}}}}}}, 0x4e) 29.143154572s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1694a, &(0x7f0000000240)=ANY=[], 0x1, 0x11fd, &(0x7f0000001b80)="$eJzs3E2LW1UYB/CncWrHqfOi1mq70INuXF06s3AlyCBTkAkotRFaQbh1bjTkmoTcMBARa1du/Rzi0p0gfoHZ+BnczcZlF+IVb/o2NbW66ETa32+RPOQ8/9x7CAROOCeHb337eb9bZd18Eq0TJ6I1ikg3U6RoRUTUfz28shuNK1d3t9vtnUspXdy+vPlmSmnt1Z8++vL7136enP7wh7UfT8XBxseHv239enD24NzhH5c/61WpV6XBcJLydG04nOTXyiLt9ap+ltL7ZZFXReoNqmJ8ZLxbDkejacoHe6sro3FRVSkfTFO/mKbJME3G05R/mvcGKcuytLoSPNDJh7d0vrtZ13VEXZ+Mp6Ou6/qZWInT8Wysxlp8HRHPxfPxQpyJF+NsvBQvx7mm6zhuHwAAAAAAAAAAAAAAAAAAAJ4c/3T+fz02nP8HAAAAAAAAAAAAAAAAAACAY/DBlau72+32zqWUliPKb/Y7+53Z82z8xu3GC7Eev0dz+n9mVl98t71zITU24kZ5/Vb++n7nqSa23Y1elFHEZvN3ArfyS83Y7fzmLJ+O5k/Fyr35rViPM/OvvzU3vxxvvH5PPov1+OWTGEYZe8217+a/2kzpnffa9+XPN30AAADwOMjSHXPX71n2oPFZ/s76+uG/D9y3vl6K80uLnTsR1fSLfl6Wxfhosfy3VxT/vmg9onduxf9kgorHv1j0NxPH4e6Hvug7AQAAAAAAAAAA4L94xLsIl2LOzrK3FzNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFQAA//9Rj8zp") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x52101, 0x0) dup3(r1, r0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000140)='THAWED\x00', 0x7) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x81800) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)="77592a3421c3fd4efde764102c5069d0bb83ca8be40d679bcc14ea18ccfbc6fe995c6a06aece2fdd805555e5c7ba62823f8c020a5b952a8c011573b4743eeda71233b8f81257926656102596c86d1257146046ed39a091dff1d4845d4a5a1adb8e2b6d3e540cd7bb6e5ca0fba9ff9dd4b957474632083fa1e43beadfa56e3e56fdf526a7290850becb3f467c3ce486e590dcedcbfee95d8de2902b4ecd4b523eaa88195747f80f4bfec71d0ef92abb6d6701bd22840f8c72c8fd3815b94c4c67a64e040f2a275f7ba16686f29bfb1933705bc51b", 0xd4}, {&(0x7f00000003c0)="deffb97973a2d83cec1c51e0453b0572fe1c9d814888303cf538289935e301b1655de86e6af69341fe45dc2737bd07fb549807cb52149e63c1c93f2dd90a0a75cc047005d33d277d6b7d3e04a99690eb4155eaaa9c64349eaf57aded84c1739daff52613b3605f2cd21c28695f04ebc3b2bec757b12756a4d20e8c90a38009f3540e798cc8b1b93554afefd96b79f6aad7c828f0a5e14c9e9fd5956fafd2ddab25e8558246c324774d3dfe931b986a1b31b17f73e365fbf16e3924e81e9f4090b8f279cd93106c9f659cd2d5e18268d6a9f04a31a7aab2073a18f4e0a7a5ea220677abc8c7000000", 0xe8}, {&(0x7f00000004c0)="90dbe19d4297676c11c0fccee03914ea6f18e4f8cc368d90b69c2a1c4219a8f85c8a17016449770667cfa09698e0687c4d59147c4e096003e235e5f78bcbb4d75de3f3d5ed1fd1d9c8b263ec9991b970c7021e53f0a0e37c3df7dba7666941b5808912d8a82805fb93e20b4d9f41137665b3eefe71e64e08ba610f3f97a81f77dc87820255158c69aa9f0f84638309af488d8912ce3bee05e24c6e822c288181d8f3d289dfa1676e04805ee35c833484c138bc5674388de1", 0xb8}], 0x3, 0x87c, 0x4) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x2}, 0x1c) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='totmaps\x00') fchdir(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='3'}, 0x50) 28.410647424s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6}, 0x90) 28.273558155s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x3a00, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}}, 0x0) 28.145715414s ago: executing program 1: socket(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x22) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b2", 0x1}], 0x1}}], 0x1, 0x20000040) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0xd37, 0x6a9d, 0x0, 0x0, 0x0) 16.77773088s ago: executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x152b3eb547114844}, 0x1a3da31b4472343a) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x152b3eb547114844}, 0x1a3da31b4472343a) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) pipe2(&(0x7f0000000040), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) socket$igmp(0x2, 0x3, 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 16.671597906s ago: executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="660a0000000000006111600000000000feffffff00000000000000000000000095004000000000002ff93077a8140a170f473595755fbf71ab14e00b1ab54a58a129f56bf420497e45445544b4ba20cfec8540b6438cbaec9af0d6bb3135b9e580cac84717c25f6aa5c25288520584e98632117eb877"], &(0x7f0000000000)='GPL\x00'}, 0x80) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09000000000000000000020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) syz_read_part_table(0x5fa, &(0x7f0000000d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f00000002c0)="06", 0x1}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004f80)) dup2(r3, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r5) open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x7800007, 0x12, r3, 0xb840000) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r6, 0x81fd) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r7, 0x0, 0xd5, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61177732b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x2, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da9", 0x0, 0x9}, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x400800, 0x109) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=ANY=[@ANYBLOB="300000004ad40e31d2cc000100000000000008002dfd71273a2c87bf8749a0b448e1a86e21e8a6d77652f36682bc5a07571b6547d4f728f2ec264497d31ecc04f6ef95d8c6356d9f500b0972eacbc357ece36c3a00edb4c259874512a5777f825dc7b7e4375df08955", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001"], 0x30}}, 0x0) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) 15.746859727s ago: executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) 15.721439141s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1e, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000040)='ext4_da_write_pages_extent\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xf84a, 0x8, 0x1fffd}, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0x5891, &(0x7f0000000200), &(0x7f0000000180), &(0x7f00000002c0)) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x70) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000440)='%pI4 \x00'}, 0x4a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x9, 0xe, 0x0, &(0x7f00000001c0)="40f0538ef0470800000068305500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 15.493140026s ago: executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r0 = perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x26, 0x6, 0xff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000340)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r6], 0x68}}, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'vcan0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x8001, 0x3, "8eb72734ae14"}}) 15.369434284s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @private}, &(0x7f0000001540)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x81, 0xd720, 0x8b, 0x80, r0, 0x19, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x9}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES8=r3, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x4009e61, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r4}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1ff, '\x00', 0x0, r5, 0x2, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000540)=""/4096, 0x1000, 0x3, &(0x7f0000000480)={0x11, 0x0, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 15.321462452s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200044f, &(0x7f0000000580), 0xfe, 0x50c, &(0x7f0000001340)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000004fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 15.190895071s ago: executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001300290a0000000000000000a2938b60", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}, 0x0) mmap(&(0x7f0000119000/0x3000)=nil, 0x3000, 0x6800006, 0x12, r0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) io_setup(0x4, &(0x7f0000000200)) ftruncate(r4, 0x81fd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580), 0x1670e68) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) 14.849084334s ago: executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x234) 14.705047046s ago: executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x6, 0x12, r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r2 = openat$cgroup_ro(r1, &(0x7f0000000a00)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x1d, 0xfffffffffffffffd, 0x8007) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0xc, 0xffffffffffffffff, 0x7ffffffffffffffc, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x800, 0x1f000000, 0x400, 0x1}, 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) listen(r4, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000480)="116e7e64a9b8cb92d6e46aa5b149ca7670c15a42f7b21fc928f3ff7a73b61861ade415d8a8ff94bf71e01ba28ebe3234f9bed047a42c901b2333e3af987629e985aea26a27ed604411586a5631c2e20fe7bee48820f8bec4c2f51e9f876939c2244ccd86ceeea71b6b04cbd7729f8030223f39f2f86afd7062ed9475627b2fa97d1cb963b0575f6f076450a6b7a729683eee3ead2f7b64ec7ccef1ecfc8008ba460e471991907e29a8dea6a8750c4928cdb0660c61bfded046b613d0e0c5ba996b2b765afb28a3fc86e11cc69619dd0be2d92497afaece11f32e912d9f42e676c4e29f141fe0850b117f2a919013a4020fe6bf8c440396883823f52bf4e99aa7234a6c7a5e46ce3682ff32df5d201739a4ef0125d628a56ce97fa27d60c51331804dd476e91552336d4dd7c3963e88b48296996bc7bddf34418c160b68d9cbe50e7a08c1f7964151d8438b8285760cc63a403325f5bbc2233154071b6403470681523cc3be26e5b9fb6ae890590f86a2d515eeb2fd4eafcd52207471b8f9da78ebbdfa86cb1545687cf4f13220f89d137542bb5db17fe7639e740ddd6e6a9203f44b19a25865cd23cac700521f845c66d8403597d0ca4fd94600fd41f3452cb59ceca5b4f2989703c367eaa740bd1c9091175e12a293ab9a150a84fc62ed1e4d22fa78f5eca5d5de8a34e3edffb830ec515fa7edd5849ede3ea2ef00b3285f17dfa7786cc8658ed0e5525be1dedf2821af39473b6db2649a5603adb5873ced256136384a9119df11da594d52522552d06f1de4cef61062f71fd37ba0f1d966d801cd04cdd45fb525934a32ccd789c5a277f24c6f2168e26ea943ce2eaa474b1e35b9a5dcddc14e98079cf9b9642f79b8c7dc943475ddf00dadfae55b4672703486eaed96b2910e20ad6dc20230eb2dd337bb059eb35c31699c5fa38aa949e222c118ade34a12c4f8bb09cb3f9f517a7ac2d9d4399a162a9019e96688bc594781b3a5c7048677e6bbde12d770e074764ff5d5de9e1fef09faf158dc4c22706699ad4b7b0f6a0202b2fe66b03ca38b555c3b60a7a871519151ad7b21df6e077376fa9879387e54ad46bce54a650dfd502cc845b4d92ba735d587f9233ca69878934c2593426311aeea7b72ca43cf6448d0fe86cee8f9602bd2406b87ec94389b17b30e3203af7c1b73774a640cb395db75bec05948d06be8ee49897626b67130e9ede36daab6f09f656edc232b4fc181ef0d37de7c05822e3817aa195a7f7860fa069b537e49c8115d5a84be7b9acf26f2ca2056b45491c64fadc3792adcfbd03c4d3f7cfd35f4ad0aad28e22901b50f1c63f43da39f0c35f64cc3252f42e757fcccfe9c926080d025fa017ac09842fb1c96a158c452354538db53839069baed610cf05caab4655885eee28bfc45c083dcdc69a82d8e5165a1270c441ea6368f4aa85502ff0e3f755c18aecd4064cb6d4bb730304903ce2ef446ba263eaa39b3ed196dfaa772c3aaf93d71a063f9c2280aabab3836d50facc4f4006f2c31eeb16aca767cbb8dcf3fb507235986a5c424ed765bfc07874d5a5a15664b183412adba1d362d21ae5f3cce40a46a5505de93e023341edb5d1a8af6681b92aa683ce6e22646817096e494089165fc6b7fd148cf17ea6a4a8eabbf3130d625af5400a727bfceed2a1409b6599adf9051b4a29e482f9aaf9e661862574e7b578c714cd444d508d11b64eda53d92467d895fbc9f1fd861321270508e7d20df5cc1320976820783380a556056f2a69d56b47b978d241d128e1007e5cef5e5926d344527e344f5894cf23f534a20aaf24be46f21b051237c8f9d1638cf8e457f378a99ab4c20f17e34b7c1e9890d071e2a06b22188a8c3f80c19977bbd9b5119bec3d3605cd65526baa339d8c1aa2aa43c12b8864aedcb711fed0d1f20ec302902c78d183b1f86f0937a5c3593173f60cc5815853f7500d11058c9e435c3c764e011ee7d72e005b77782ed0b040668325e610eb00ce468f52f7bd0c1b7d474195190a41be8fcde49ed19c6a91f367c95e2d845307666e81917be95fdf7ffe2100546c2e58b8b2b9d45658f057dd03371a6a64df23ce17bb485d69e", 0x5d5}], 0x1}}], 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000280)={{0x2, 0x4e21, @multicast2}, {0x6, @broadcast}, 0xc, {0x2, 0x4e20, @multicast1}, 'macvlan1\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14.451097575s ago: executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000480)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x1a, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@cipso={0x86, 0xf, 0x3, [{0x2, 0x9, "80d7c4129c2229"}]}, @rr={0x7, 0x23, 0x9d, [@local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @empty, @multicast2, @multicast1]}, @timestamp={0x44, 0x20, 0x7c, 0x0, 0x8, [0x8, 0x7, 0xffffffff, 0xf700, 0x14, 0x1ff8, 0x7fffffff]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sync() sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="030114006863c3000e358000ad000114000000320600ac141412e0000003808a8972bd0b72e410820c520f061fe4fd004b889430ebb52997e36e039b1c59f733b3e44929297d9250e4646d67d50261a67a34a09ed84b38fd1c2bd942fb1cf8a4a6999e"], 0x65dd}], 0x1}, 0x0) 14.066793033s ago: executing program 4: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast2, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4) getpeername$l2tp6(r0, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ptrace(0x10, 0x1) (async) ptrace(0x10, 0x1) r3 = inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0xd, r4, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@isdn={0x22, 0xd9, 0x0, 0x0, 0x9}, 0xa1, &(0x7f00000006c0)}, 0x20000080) 1.977506039s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1e, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000040)='ext4_da_write_pages_extent\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xf84a, 0x8, 0x1fffd}, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0x5891, &(0x7f0000000200), &(0x7f0000000180), &(0x7f00000002c0)) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x70) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000440)='%pI4 \x00'}, 0x4a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x9, 0xe, 0x0, &(0x7f00000001c0)="40f0538ef0470800000068305500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.941124574s ago: executing program 3: fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x38, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @jmp={0x5, 0x0, 0xa, 0x8, 0xb, 0x2, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @ldst={0x2, 0x0, 0x4, 0x9, 0xa, 0xffffffffffffffff, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x1, 0x42, &(0x7f0000000680)=""/66, 0x41000, 0x65, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0x7ffffffc}, 0x90) 1.759755512s ago: executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$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") open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='fdinfo/4\x00') openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket(0xa, 0x2, 0x0) (async) r2 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x118) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) 1.441459461s ago: executing program 0: futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000280)='GPL\x00'}, 0x90) getpgid(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, &(0x7f00000020c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @dev, r2}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.348756285s ago: executing program 0: open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 1.271391386s ago: executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000009, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x220, 0x330, 0x220, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @multicast1, @dev}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="14faede8deed", @mac=@broadcast, @private, @multicast1}}}, {{@arp={@empty, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan1\x00', 'syz_tun\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @local, @remote}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x82, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x100000000000, &(0x7f0000000000)) pivot_root(0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x40840}, 0x40000) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x81) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './mnt\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008804) r4 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r4, 0x540a, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x4, 0x241, &(0x7f00000002c0)="$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") ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 8192 [ 267.719811][T12168] loop3: p1 < > p4 < > [ 268.124613][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.319510][T12193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.327905][T12194] loop4: detected capacity change from 0 to 128 [ 268.371890][ T29] audit: type=1400 audit(1985610697.819:2858): avc: denied { append } for pid=12189 comm="syz-executor.3" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.497905][ T29] audit: type=1400 audit(1985610697.949:2859): avc: denied { setopt } for pid=12197 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.727432][T12209] loop4: detected capacity change from 0 to 512 [ 268.796069][T12209] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 268.817674][T12215] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.895799][T12209] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 268.968710][T12209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 18: invalid block bitmap [ 269.043218][T12209] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 269.093246][T12209] EXT4-fs (loop4): 1 truncate cleaned up [ 269.094992][T12226] loop1: detected capacity change from 0 to 512 [ 269.099243][T12209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.142678][T12226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 269.220560][T12209] ext2 filesystem being mounted at /root/syzkaller-testdir566643291/syzkaller.dXZKqb/122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.282579][T12226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.328143][T12233] loop3: detected capacity change from 0 to 128 [ 269.386893][T12226] ext4 filesystem being mounted at /root/syzkaller-testdir2076797116/syzkaller.cL15cd/108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.433735][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.473212][ T29] audit: type=1326 audit(1985610698.909:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36d1da3ee9 code=0x0 [ 269.585890][T10435] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.746854][T12246] loop4: detected capacity change from 0 to 512 [ 269.778191][T12250] loop1: detected capacity change from 0 to 512 [ 269.814516][T12246] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 269.814683][T12250] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 269.860189][T12250] syz-executor.1: attempt to access beyond end of device [ 269.860189][T12250] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 269.884290][T12246] EXT4-fs (loop4): failed to open journal device unknown-block(7,75) -16 [ 269.936112][T12250] EXT4-fs (loop1): couldn't read superblock of external journal [ 270.022615][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.242281][T12256] loop3: detected capacity change from 0 to 2048 [ 270.317183][T12256] loop3: p1 p2 < > p3 p4 < p5 > [ 270.322150][T12256] loop3: partition table partially beyond EOD, truncated [ 270.404279][T12256] loop3: p1 start 2305 is beyond EOD, truncated [ 270.410617][T12256] loop3: p2 start 4294902784 is beyond EOD, truncated [ 270.417420][T12256] loop3: p3 start 4278191616 is beyond EOD, truncated [ 270.560129][T12256] loop3: p5 start 2305 is beyond EOD, truncated [ 270.736408][T12272] loop3: detected capacity change from 0 to 128 [ 270.761845][T12270] loop1: detected capacity change from 0 to 2048 [ 270.893603][T12270] loop1: p1 < > p4 [ 270.897957][T12270] loop1: p4 size 8388608 extends beyond EOD, truncated [ 271.413577][T12282] veth0_vlan: entered allmulticast mode [ 271.426502][T12283] veth0_vlan: left promiscuous mode [ 271.432857][T12283] veth0_vlan: entered promiscuous mode [ 271.678036][ T29] audit: type=1400 audit(1985610701.129:2861): avc: denied { shutdown } for pid=12285 comm="syz-executor.0" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.753492][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.792081][ T29] audit: type=1400 audit(1985610701.239:2862): avc: denied { append } for pid=12290 comm="syz-executor.0" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 271.879729][ T29] audit: type=1400 audit(1985610701.299:2863): avc: denied { create } for pid=12290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 271.981315][T12294] loop1: detected capacity change from 0 to 512 [ 272.064127][T12294] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 272.086187][T12294] syz-executor.1: attempt to access beyond end of device [ 272.086187][T12294] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 272.133837][T12294] EXT4-fs (loop1): couldn't read superblock of external journal [ 272.228805][T12299] loop3: detected capacity change from 0 to 512 [ 272.278330][T12299] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 272.314101][T12306] loop4: detected capacity change from 0 to 128 [ 272.348402][ T29] audit: type=1400 audit(1985610701.799:2864): avc: denied { unmount } for pid=11847 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.383287][T12299] syz-executor.3: attempt to access beyond end of device [ 272.383287][T12299] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 272.460898][T12299] EXT4-fs (loop3): couldn't read superblock of external journal [ 272.788634][T12327] sg_write: data in/out 185/42 bytes for SCSI command 0x0-- guessing data in; [ 272.788634][T12327] program syz-executor.0 not setting count and/or reply_len properly [ 273.144267][T12333] loop4: detected capacity change from 0 to 512 [ 273.411324][T12338] veth0_vlan: left promiscuous mode [ 273.417688][T12338] veth0_vlan: entered promiscuous mode [ 273.492959][T12333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.673303][T12333] ext4 filesystem being mounted at /root/syzkaller-testdir566643291/syzkaller.dXZKqb/130/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.794437][T12333] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 273.875625][T12333] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 274.055797][T12333] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 274.176213][T12333] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 274.250133][T12355] loop3: detected capacity change from 0 to 164 [ 274.266680][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.321536][T12355] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 274.676445][ T29] audit: type=1400 audit(1985610704.129:2865): avc: denied { listen } for pid=12372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.726359][ T29] audit: type=1400 audit(1985610704.149:2866): avc: denied { accept } for pid=12372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.817629][ T29] audit: type=1326 audit(1985610704.209:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d1da3ee9 code=0x7ffc0000 [ 274.842036][ T29] audit: type=1326 audit(1985610704.209:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d1da3ee9 code=0x7ffc0000 [ 274.866304][ T29] audit: type=1326 audit(1985610704.209:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d1da3ee9 code=0x7ffc0000 [ 274.890514][ T29] audit: type=1326 audit(1985610704.209:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d1da3ee9 code=0x7ffc0000 [ 274.901710][T12378] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 274.914589][ T29] audit: type=1326 audit(1985610704.209:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d1da3ee9 code=0x7ffc0000 [ 275.003930][T12379] veth0_vlan: entered allmulticast mode [ 275.051587][T12379] veth0_vlan: left promiscuous mode [ 275.057908][T12379] veth0_vlan: entered promiscuous mode [ 275.901137][T12389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12389 comm=syz-executor.3 [ 275.947248][T12391] netem: change failed [ 276.072978][T12394] loop4: detected capacity change from 0 to 512 [ 276.198185][T12394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.225482][T12394] ext4 filesystem being mounted at /root/syzkaller-testdir566643291/syzkaller.dXZKqb/139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.417050][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.536056][T12399] loop4: detected capacity change from 0 to 128 [ 276.774676][T12404] tmpfs: Bad value for 'mpol' [ 276.974684][T12411] xt_hashlimit: max too large, truncated to 1048576 [ 277.102126][T12415] loop4: detected capacity change from 0 to 512 [ 277.233605][T12415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.246186][T12415] ext4 filesystem being mounted at /root/syzkaller-testdir566643291/syzkaller.dXZKqb/144/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.288188][T12415] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 277.352941][T12415] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 277.484477][T12415] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 277.593211][T12415] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 277.703613][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.804513][T12423] loop3: detected capacity change from 0 to 256 [ 277.813241][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 277.813253][ T29] audit: type=1326 audit(1985610707.249:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.843272][ T29] audit: type=1326 audit(1985610707.249:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.867275][ T29] audit: type=1326 audit(1985610707.249:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.891327][ T29] audit: type=1326 audit(1985610707.249:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.915365][ T29] audit: type=1326 audit(1985610707.249:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.939487][ T29] audit: type=1326 audit(1985610707.249:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.963433][ T29] audit: type=1326 audit(1985610707.249:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 277.987520][ T29] audit: type=1326 audit(1985610707.249:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 278.011536][ T29] audit: type=1326 audit(1985610707.249:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 278.035671][ T29] audit: type=1326 audit(1985610707.249:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb931157667 code=0x7ffc0000 [ 278.097749][T12423] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.417589][T12439] loop3: detected capacity change from 0 to 128 [ 278.793957][T12451] gre0: Master is either lo or non-ether device [ 278.836897][T12452] loop4: detected capacity change from 0 to 512 [ 278.906500][T12452] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 278.973277][T12452] syz-executor.4: attempt to access beyond end of device [ 278.973277][T12452] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 278.990307][T12454] loop3: detected capacity change from 0 to 512 [ 279.061016][T12452] EXT4-fs (loop4): couldn't read superblock of external journal [ 279.107650][T12454] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.193391][T12454] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.615500][T12471] loop3: detected capacity change from 0 to 128 [ 280.895829][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.942024][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.949120][T12476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.034962][T12476] team0: Port device bridge0 added [ 281.064798][T12479] loop3: detected capacity change from 0 to 128 [ 281.124227][T12479] FAT-fs (loop3): Unrecognized mount option "6ŒSߢ6 [ 281.124227][T12479] Ùêm«”Ì{óIfÝá·Õ‘Œæl.Õ:zz¹ÚhùhÔØSÉЙz”]߆&²®8Vm7l³1£N¡[Ûo@”p³Ã}Ò¦`LŽ—ÛºŒÌ" or missing value [ 281.333361][T12483] loop4: detected capacity change from 0 to 512 [ 281.385604][T12483] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 281.445345][T12483] syz-executor.4: attempt to access beyond end of device [ 281.445345][T12483] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 281.499085][T12483] EXT4-fs (loop4): couldn't read superblock of external journal [ 281.627079][T12493] loop3: detected capacity change from 0 to 512 [ 281.684462][T12493] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.867775][ T9518] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 282.196628][T12501] loop4: detected capacity change from 0 to 128 [ 282.357931][T12503] loop3: detected capacity change from 0 to 2048 [ 282.418781][T12503] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.633546][T12503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.692038][T12512] wg0 speed is unknown, defaulting to 1000 [ 282.768756][T12503] usb usb9: usbfs: process 12503 (syz-executor.3) did not claim interface 0 before use [ 282.883995][T12503] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.015789][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.292204][T12515] loop3: detected capacity change from 0 to 512 [ 283.399283][T12515] EXT4-fs: Ignoring removed oldalloc option [ 283.424192][T12515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.489122][T12515] EXT4-fs (loop3): 1 truncate cleaned up [ 283.562762][T12515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.783666][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 283.783755][ T29] audit: type=1400 audit(1985610713.239:2982): avc: denied { write } for pid=12514 comm="syz-executor.3" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.853281][T12515] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.877488][ T29] audit: type=1400 audit(1985610713.269:2983): avc: denied { open } for pid=12514 comm="syz-executor.3" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.900074][ T29] audit: type=1400 audit(1985610713.299:2984): avc: denied { read append } for pid=12514 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.923204][ T29] audit: type=1400 audit(1985610713.299:2985): avc: denied { mounton } for pid=12514 comm="syz-executor.3" path="/root/syzkaller-testdir3604651031/syzkaller.hYSAqk/210/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.967112][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.075580][T12515] vlan2: entered promiscuous mode [ 284.080636][T12515] ip6gretap0: entered promiscuous mode [ 284.260561][ T9518] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #18: comm syz-executor.3: corrupted xattr block 35: invalid header [ 284.265562][ T29] audit: type=1400 audit(1985610713.709:2986): avc: denied { unlink } for pid=9518 comm="syz-executor.3" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 284.464362][ T9518] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 284.584044][ T29] audit: type=1400 audit(1985610714.039:2987): avc: denied { unlink } for pid=9518 comm="syz-executor.3" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.703472][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.113824][T12528] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.251099][T12532] loop3: detected capacity change from 0 to 512 [ 285.338573][T12532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 285.379313][T12535] loop4: detected capacity change from 0 to 512 [ 285.439790][T12532] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz-executor.3: Unimplemented hash flags: 0x0001 [ 285.451649][T12532] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 285.484346][T12535] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.518355][T12535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.643961][T12535] EXT4-fs (loop4): 1 truncate cleaned up [ 285.645447][T12536] EXT4-fs warning (device loop3): dx_probe:868: inode #2: comm syz-executor.3: Unimplemented hash flags: 0x0001 [ 285.649875][T12535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.661424][T12536] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 285.779989][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.924251][T12542] loop3: detected capacity change from 0 to 512 [ 286.013358][T12542] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 286.022173][T12542] syz-executor.3: attempt to access beyond end of device [ 286.022173][T12542] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 286.153322][T12542] EXT4-fs (loop3): couldn't read superblock of external journal [ 286.212741][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.446323][T12545] loop4: detected capacity change from 0 to 512 [ 286.515158][T12545] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 286.619954][T12545] EXT4-fs (loop4): 1 truncate cleaned up [ 286.705279][T12545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.781348][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.037245][T12552] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.815609][T12568] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.960408][T12569] wg0 speed is unknown, defaulting to 1000 [ 288.015119][ T29] audit: type=1400 audit(1985610717.469:2988): avc: denied { read } for pid=12570 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.099857][T12571] loop4: detected capacity change from 0 to 2048 [ 288.148896][T12571] EXT4-fs: Ignoring removed nobh option [ 288.267081][T12571] EXT4-fs (loop4): failed to initialize system zone (-117) [ 288.293279][T12571] EXT4-fs (loop4): mount failed [ 289.234404][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.356559][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.436083][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.506511][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.665911][ T55] bridge_slave_1: left allmulticast mode [ 289.671655][ T55] bridge_slave_1: left promiscuous mode [ 289.677405][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.720903][ T55] bridge_slave_0: left allmulticast mode [ 289.726628][ T55] bridge_slave_0: left promiscuous mode [ 289.732294][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.020865][T12584] wg0 speed is unknown, defaulting to 1000 [ 290.056008][ T55] hsr_slave_0: left promiscuous mode [ 290.061513][ T55] hsr_slave_1: left promiscuous mode [ 290.075727][ T55] batman_adv: batadv0: Removing interface: team0 [ 290.090588][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.098051][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.131264][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.138757][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.177115][ T55] veth1_macvtap: left promiscuous mode [ 290.182621][ T55] veth0_macvtap: left promiscuous mode [ 290.190350][ T55] veth1_vlan: left promiscuous mode [ 290.195654][ T55] veth0_vlan: left promiscuous mode [ 290.481220][ T55] team0 (unregistering): Port device team_slave_1 removed [ 290.517075][ T55] team0 (unregistering): Port device team_slave_0 removed [ 290.808740][T12584] chnl_net:caif_netlink_parms(): no params data found [ 291.010802][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.018224][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.079976][T12584] bridge_slave_0: entered allmulticast mode [ 291.097674][T12584] bridge_slave_0: entered promiscuous mode [ 291.118809][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.125886][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.153904][T12584] bridge_slave_1: entered allmulticast mode [ 291.186168][T12584] bridge_slave_1: entered promiscuous mode [ 291.225681][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.254586][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.315557][T12584] team0: Port device team_slave_0 added [ 291.322033][T12584] team0: Port device team_slave_1 added [ 291.326262][T12612] loop3: detected capacity change from 0 to 512 [ 291.404163][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.411118][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.437011][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.524404][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.531437][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.557374][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.573729][T12612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.627301][T12584] hsr_slave_0: entered promiscuous mode [ 291.633686][T12584] hsr_slave_1: entered promiscuous mode [ 291.639957][T12584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.653214][T12584] Cannot create hsr debugfs directory [ 291.705450][T12612] ext4 filesystem being mounted at /root/syzkaller-testdir3604651031/syzkaller.hYSAqk/219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.828095][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.840079][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.887121][ T29] audit: type=1400 audit(1985610721.342:2989): avc: denied { remount } for pid=12619 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 291.908689][T12620] vcan0: entered allmulticast mode [ 291.967273][T12584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.007239][T12584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.055615][T12620] wg2: entered promiscuous mode [ 292.060491][T12620] wg2: entered allmulticast mode [ 292.076460][T12584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.108677][T12584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.219310][T12584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.254699][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.266678][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.273813][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.349589][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.356725][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.511806][T12626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=12626 comm=syz-executor.4 [ 292.514043][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.587491][ T29] audit: type=1400 audit(1985610722.042:2990): avc: denied { connect } for pid=12636 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 292.666272][T12642] loop4: detected capacity change from 0 to 128 [ 292.715602][T12637] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 292.748124][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.817788][T12584] veth0_vlan: entered promiscuous mode [ 292.836452][T12584] veth1_vlan: entered promiscuous mode [ 292.894231][T12584] veth0_macvtap: entered promiscuous mode [ 292.916489][T12584] veth1_macvtap: entered promiscuous mode [ 292.943539][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.954118][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.964081][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.974526][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.984339][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.994834][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.004651][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.004664][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.004675][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.035425][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.045221][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.055733][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.065639][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.076067][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.085957][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.096370][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.106179][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.116675][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.126570][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.137020][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.153674][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.169117][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.179704][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.189580][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.200018][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.209832][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.220251][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.230159][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.240591][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.250441][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.260870][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.270704][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.281173][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.291026][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.301444][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.311337][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.321795][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.331597][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.342054][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.351986][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.362457][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.458590][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.469177][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.482096][T12584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.490957][T12584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.499751][T12584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.508528][T12584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.857299][T12667] syzkaller0: entered promiscuous mode [ 293.862840][T12667] syzkaller0: entered allmulticast mode [ 294.016952][T12678] loop4: detected capacity change from 0 to 512 [ 294.070159][T12678] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 294.431253][ T29] audit: type=1326 audit(1985610723.882:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x0 [ 294.838704][T12689] IPv6: NLM_F_REPLACE set, but no existing node found! [ 295.016169][ T29] audit: type=1326 audit(1985610724.473:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7df76ee9 code=0x0 [ 295.926420][T12702] loop4: detected capacity change from 0 to 512 [ 295.980899][T12700] wg0 speed is unknown, defaulting to 1000 [ 296.017897][T12702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.103186][T12702] ext4 filesystem being mounted at /root/syzkaller-testdir566643291/syzkaller.dXZKqb/190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.204352][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.468093][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.896377][T12735] loop2: detected capacity change from 0 to 128 [ 298.005816][ T29] audit: type=1400 audit(1985610727.464:2993): avc: denied { mounton } for pid=12734 comm="syz-executor.2" path="/root/syzkaller-testdir4092204306/syzkaller.LopJj3/4/file2/bus" dev="loop2" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 298.080607][T12735] loop2: detected capacity change from 128 to 0 [ 298.086976][T12736] syz-executor.2: attempt to access beyond end of device [ 298.086976][T12736] loop2: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 298.132080][T12736] syz-executor.2: attempt to access beyond end of device [ 298.132080][T12736] loop2: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 298.149210][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.247061][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.290517][T12736] syz-executor.2: attempt to access beyond end of device [ 298.290517][T12736] loop2: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 298.340996][T12736] syz-executor.2: attempt to access beyond end of device [ 298.340996][T12736] loop2: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 298.356331][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.386641][T12736] syz-executor.2: attempt to access beyond end of device [ 298.386641][T12736] loop2: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 298.430853][ T40] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 298.454904][ T40] batman_adv: batadv1: Removing interface: netdevsim0 [ 298.466075][T12736] syz-executor.2: attempt to access beyond end of device [ 298.466075][T12736] loop2: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 298.488609][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.490021][T12750] netlink: get zone limit has 8 unknown bytes [ 298.553835][T12736] syz-executor.2: attempt to access beyond end of device [ 298.553835][T12736] loop2: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 298.595481][ T40] bridge_slave_1: left allmulticast mode [ 298.601193][ T40] bridge_slave_1: left promiscuous mode [ 298.606804][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.652544][T12736] syz-executor.2: attempt to access beyond end of device [ 298.652544][T12736] loop2: rw=0, sector=34, nr_sectors = 1 limit=0 [ 298.666481][ T40] bridge_slave_0: left allmulticast mode [ 298.672140][ T40] bridge_slave_0: left promiscuous mode [ 298.677859][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.762742][T12736] FAT-fs (loop2): Directory bread(block 34) failed [ 298.771285][T12736] syz-executor.2: attempt to access beyond end of device [ 298.771285][T12736] loop2: rw=0, sector=35, nr_sectors = 1 limit=0 [ 298.832331][T12736] FAT-fs (loop2): Directory bread(block 35) failed [ 298.854710][T12736] syz-executor.2: attempt to access beyond end of device [ 298.854710][T12736] loop2: rw=0, sector=36, nr_sectors = 1 limit=0 [ 298.971816][T12756] loop3: detected capacity change from 0 to 128 [ 298.989490][T12736] FAT-fs (loop2): Directory bread(block 36) failed [ 299.010108][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.040391][T12736] FAT-fs (loop2): Directory bread(block 37) failed [ 299.046916][T12736] FAT-fs (loop2): Directory bread(block 38) failed [ 299.054019][T12736] FAT-fs (loop2): Directory bread(block 39) failed [ 299.060664][T12736] FAT-fs (loop2): Directory bread(block 40) failed [ 299.077667][T12584] FAT-fs (loop2): Directory bread(block 34) failed [ 299.088911][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.160749][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.192310][ T40] bond0 (unregistering): Released all slaves [ 299.202721][T12584] FAT-fs (loop2): Directory bread(block 35) failed [ 299.209306][T12584] FAT-fs (loop2): Directory bread(block 36) failed [ 299.224399][T12741] wg0 speed is unknown, defaulting to 1000 [ 299.312990][ T40] hsr_slave_0: left promiscuous mode [ 299.320432][ T40] hsr_slave_1: left promiscuous mode [ 299.329980][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.337436][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.360779][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.368212][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.410585][T12584] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 299.418451][ T40] veth1_macvtap: left promiscuous mode [ 299.424108][ T40] veth0_macvtap: left promiscuous mode [ 299.429634][ T40] veth1_vlan: left promiscuous mode [ 299.434926][ T40] veth0_vlan: left promiscuous mode [ 299.671152][ T40] team0 (unregistering): Port device team_slave_1 removed [ 299.690136][ T40] team0 (unregistering): Port device team_slave_0 removed [ 299.933719][T12773] pim6reg: entered allmulticast mode [ 300.009673][T12741] chnl_net:caif_netlink_parms(): no params data found [ 300.040944][T12776] loop4: detected capacity change from 0 to 512 [ 300.065800][T12776] EXT4-fs: quotafile must be on filesystem root [ 300.167908][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.294930][T12741] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.302029][T12741] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.319540][T12741] bridge_slave_0: entered allmulticast mode [ 300.335222][T12741] bridge_slave_0: entered promiscuous mode [ 300.353498][T12741] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.360652][T12741] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.390575][T12741] bridge_slave_1: entered allmulticast mode [ 300.403034][T12741] bridge_slave_1: entered promiscuous mode [ 300.446455][T12741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.481894][T12741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.538141][T12741] team0: Port device team_slave_0 added [ 300.540397][ T29] audit: type=1400 audit(1985610729.994:2994): avc: denied { mounton } for pid=12787 comm="syz-executor.3" path="/root/syzkaller-testdir3604651031/syzkaller.hYSAqk/236/file0" dev="sda1" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 300.557275][T12741] team0: Port device team_slave_1 added [ 300.643475][T12741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.650516][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.676642][T12741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.772412][T12741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.779448][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.805423][T12741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.943520][T12741] hsr_slave_0: entered promiscuous mode [ 300.953490][T12741] hsr_slave_1: entered promiscuous mode [ 300.964174][T12741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.990359][T12741] Cannot create hsr debugfs directory [ 301.268776][T12796] loop3: detected capacity change from 0 to 512 [ 301.349423][T12741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.370810][T12796] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 301.384546][T12741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.400150][T12741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.427495][T12741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.586266][T12741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.633653][T12741] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.664618][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.671686][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.712247][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.719367][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.919116][T12741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.118598][T12741] veth0_vlan: entered promiscuous mode [ 302.148300][T12741] veth1_vlan: entered promiscuous mode [ 302.205310][T12741] veth0_macvtap: entered promiscuous mode [ 302.240616][T12741] veth1_macvtap: entered promiscuous mode [ 302.273188][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.283649][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.293572][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.304075][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.313879][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.324297][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.334140][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.341239][T12814] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 99999999 (only 8 groups) [ 302.344725][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.365558][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.376022][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.385827][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.396257][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.406052][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.416475][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.426335][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.436819][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.446658][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.457191][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.467004][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.477482][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.491073][T12741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.505273][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.515857][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.525805][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.536318][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.546272][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.556756][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.566639][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.577128][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.586983][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.597416][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.607232][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.617650][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.627464][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.637879][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.647692][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.658113][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.667971][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.678424][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.688317][T12741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.698726][T12741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.806111][T12816] loop4: detected capacity change from 0 to 8192 [ 302.942863][T12816] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.961610][T12741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.004472][ T29] audit: type=1400 audit(1985610732.464:2995): avc: denied { append } for pid=12812 comm="syz-executor.4" name="event2" dev="devtmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 303.070167][T12741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.078958][T12741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.087687][T12741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.096407][T12741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.204424][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.320903][T12824] loop1: detected capacity change from 0 to 512 [ 303.421190][T12824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.493018][T12824] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.751731][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.989585][T12840] loop1: detected capacity change from 0 to 512 [ 304.007548][T12840] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.062136][T12840] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 304.092564][T12840] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 304.165161][T12840] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.257505][ T29] audit: type=1400 audit(1985610733.714:2996): avc: denied { rename } for pid=12839 comm="syz-executor.1" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 304.318897][T12741] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 304.372229][T12850] loop4: detected capacity change from 0 to 1024 [ 304.395898][T12850] EXT4-fs: Ignoring removed orlov option [ 304.401620][T12850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.433118][T12850] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 304.442913][T12850] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 304.714284][T12852] loop1: detected capacity change from 0 to 2048 [ 304.771866][T12863] loop4: detected capacity change from 0 to 1024 [ 304.831485][T12852] loop1: p1 < > p3 [ 304.857350][T12852] loop1: p3 size 134217728 extends beyond EOD, truncated [ 304.911884][T12863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.987938][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.116506][T12866] wg0 speed is unknown, defaulting to 1000 [ 305.130662][T10165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.322851][T12866] chnl_net:caif_netlink_parms(): no params data found [ 305.415967][T12889] loop3: detected capacity change from 0 to 512 [ 305.561473][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.568614][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.624412][T12866] bridge_slave_0: entered allmulticast mode [ 305.637593][T12889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.650854][T12866] bridge_slave_0: entered promiscuous mode [ 305.664341][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.671499][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.712810][T12866] bridge_slave_1: entered allmulticast mode [ 305.719147][T12866] bridge_slave_1: entered promiscuous mode [ 305.742849][T12889] ext4 filesystem being mounted at /root/syzkaller-testdir3604651031/syzkaller.hYSAqk/243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.852505][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.893986][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.966120][T12866] team0: Port device team_slave_0 added [ 305.989528][T12866] team0: Port device team_slave_1 added [ 306.030007][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.052340][T12866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.059328][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.085226][T12866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.119922][T12917] loop1: detected capacity change from 0 to 512 [ 306.169040][T12917] EXT4-fs: Ignoring removed i_version option [ 306.176960][T12866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.184334][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.210553][T12866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.218652][T12917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.229787][T12917] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 306.372838][T12866] hsr_slave_0: entered promiscuous mode [ 306.380592][T12866] hsr_slave_1: entered promiscuous mode [ 306.410405][T12866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.417947][T12866] Cannot create hsr debugfs directory [ 306.535966][T12923] loop1: detected capacity change from 0 to 1024 [ 306.620533][T12923] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 306.641897][T12866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.669032][T12923] JBD2: no valid journal superblock found [ 306.674861][T12923] EXT4-fs (loop1): Could not load journal inode [ 306.741543][T12866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.811706][T12866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.901946][T12866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.022345][T12866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.055525][T12866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.082556][T12866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.104268][T12866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.126145][T12929] loop1: detected capacity change from 0 to 164 [ 307.272092][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.311954][T12866] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.345014][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.352259][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.391383][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.398458][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.578898][T12942] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.583630][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.777229][T12866] veth0_vlan: entered promiscuous mode [ 307.785991][T12956] loop1: detected capacity change from 0 to 512 [ 307.813030][T12866] veth1_vlan: entered promiscuous mode [ 307.879941][T12866] veth0_macvtap: entered promiscuous mode [ 307.910628][T12866] veth1_macvtap: entered promiscuous mode [ 307.926373][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.936845][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.946921][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.957397][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.967214][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.977665][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.987538][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.997957][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.998621][ T29] audit: type=1326 audit(1985610737.454:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 308.007752][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.007766][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.007776][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.007789][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.007798][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.031770][ T29] audit: type=1326 audit(1985610737.454:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931159ee9 code=0x7ffc0000 [ 308.107623][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.117731][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.128146][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.137942][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.148352][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.158181][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.163430][T12956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.168640][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.190935][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.201361][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.229186][T12956] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.268036][T12866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.301495][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.311993][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.321906][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.332360][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.342240][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.352760][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.362595][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.373108][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.382923][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.393398][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.403278][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.413704][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.423597][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.434054][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.443865][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.454315][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.464127][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.474569][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.484400][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.494820][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.504651][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.515132][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.607440][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.815569][T12866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.883701][T12866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.892434][T12866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.903474][T12866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.912834][T12866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.967943][T12965] loop1: detected capacity change from 0 to 512 [ 309.050385][ T29] audit: type=1400 audit(1985610738.434:2999): avc: denied { ioctl } for pid=12966 comm="syz-executor.3" path="socket:[48634]" dev="sockfs" ino=48634 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 309.205437][T12965] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 309.213692][T12965] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 309.233569][T12971] loop1: detected capacity change from 0 to 512 [ 309.404269][T12971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.586895][T12971] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.110042][T12965] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.117200][T12965] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.541946][T12965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.641765][T12965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.900520][T12965] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.909524][T12965] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.918609][T12965] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.927579][T12965] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.191056][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.574979][T13016] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 311.609581][T13017] loop1: detected capacity change from 0 to 512 [ 311.638718][T13019] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 311.700221][T13017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.800679][T13017] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.904287][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.013445][ T29] audit: type=1400 audit(1985610742.474:3000): avc: denied { shutdown } for pid=13056 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 313.073899][ T29] audit: type=1400 audit(1985610742.474:3001): avc: denied { bind } for pid=13056 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.093611][ T29] audit: type=1400 audit(1985610742.474:3002): avc: denied { listen } for pid=13056 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.323041][T13062] loop3: detected capacity change from 0 to 512 [ 313.426205][T13065] 9pnet_fd: Insufficient options for proto=fd [ 313.435954][T13062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.581465][T13076] dummy0: entered promiscuous mode [ 313.591100][T13076] dummy0: left promiscuous mode [ 313.623306][ T29] audit: type=1400 audit(1985610743.084:3003): avc: denied { accept } for pid=13075 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.643390][T13062] ext4 filesystem being mounted at /root/syzkaller-testdir3604651031/syzkaller.hYSAqk/258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.684177][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.778665][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.120735][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.271758][T13093] Falling back ldisc for ttyS3. [ 314.290908][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.572223][T13100] 9pnet_fd: Insufficient options for proto=fd [ 314.803615][T13108] loop1: detected capacity change from 0 to 512 [ 314.861206][T13108] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 315.139990][T13120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.340676][T13123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.390465][T13120] Falling back ldisc for ttyS3. [ 315.721234][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.859963][T13136] 9pnet_fd: Insufficient options for proto=fd [ 315.944003][T13138] loop1: detected capacity change from 0 to 512 [ 316.029773][T13138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.091545][T13138] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.243445][T13148] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 46475 (only 8 groups) [ 316.410857][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.541103][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.812484][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.821874][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.840563][T13153] Falling back ldisc for ttyS3. [ 316.860619][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.900592][T13157] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 316.961619][T13157] bond1: entered allmulticast mode [ 317.034947][T13157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.445703][ T29] audit: type=1400 audit(1985610746.904:3004): avc: denied { ioctl } for pid=13183 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 317.740219][T13195] loop3: detected capacity change from 0 to 128 [ 317.840518][T13197] Falling back ldisc for ttyS3. [ 317.897958][T13198] wg0 speed is unknown, defaulting to 1000 [ 317.911518][T13200] loop3: detected capacity change from 0 to 128 [ 318.748403][T13232] loop3: detected capacity change from 0 to 512 [ 318.836069][T13232] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 318.898264][T13234] __nla_validate_parse: 6 callbacks suppressed [ 318.898275][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.235127][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.412703][T13243] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 319.420807][T13243] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 319.536777][T13243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13243 comm=syz-executor.0 [ 319.638839][T13243] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 319.646951][T13243] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 319.651797][T13246] loop3: detected capacity change from 0 to 128 [ 319.731897][ T29] audit: type=1326 audit(1985610749.184:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.755916][ T29] audit: type=1326 audit(1985610749.184:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.779882][ T29] audit: type=1326 audit(1985610749.184:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.803822][ T29] audit: type=1326 audit(1985610749.184:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.827853][ T29] audit: type=1326 audit(1985610749.184:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.851851][ T29] audit: type=1326 audit(1985610749.194:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.875892][ T29] audit: type=1326 audit(1985610749.194:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.899933][ T29] audit: type=1326 audit(1985610749.194:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.923927][ T29] audit: type=1326 audit(1985610749.194:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 319.947929][ T29] audit: type=1326 audit(1985610749.194:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x7ffc0000 [ 320.060523][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.284054][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.414400][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.748965][T13278] loop1: detected capacity change from 0 to 8192 [ 320.951667][T13286] pim6reg1: entered promiscuous mode [ 320.957007][T13286] pim6reg1: entered allmulticast mode [ 321.071062][T13284] wg0 speed is unknown, defaulting to 1000 [ 321.205486][T13289] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 321.213603][T13289] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 321.263144][T13290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13290 comm=syz-executor.0 [ 321.425483][T13290] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 321.433618][T13290] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 321.476492][T13294] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 321.561246][T13295] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 321.612913][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.664603][T13299] loop1: detected capacity change from 0 to 512 [ 321.743604][T13299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.826853][T13299] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.994255][T13299] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 322.070483][T13299] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 322.097196][T13299] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 322.144914][T13299] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 322.525965][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.560501][T13329] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 46 (only 8 groups) [ 322.811819][T13333] dccp_xmit_packet: Payload too large (65475) for featneg. [ 322.839655][T13335] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 323.328083][T13353] loop1: detected capacity change from 0 to 1024 [ 323.365952][T13353] EXT4-fs: Ignoring removed orlov option [ 323.408461][T13353] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 323.418220][T13353] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 324.049300][T13385] loop3: detected capacity change from 0 to 512 [ 324.180733][T13385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.270970][T13385] ext4 filesystem being mounted at /root/syzkaller-testdir3604651031/syzkaller.hYSAqk/279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.506237][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.039196][T13411] loop3: detected capacity change from 0 to 1764 [ 325.167563][T13413] wg0 speed is unknown, defaulting to 1000 [ 325.323602][ T4010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.453803][ T4010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.571855][ T4010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.621702][ T4010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.675006][T13423] x_tables: duplicate underflow at hook 2 [ 325.750499][ T4010] bridge_slave_1: left allmulticast mode [ 325.756175][ T4010] bridge_slave_1: left promiscuous mode [ 325.761917][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.782416][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 325.782427][ T29] audit: type=1400 audit(1985610755.244:3052): avc: denied { nlmsg_read } for pid=13428 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 325.819229][ T4010] bridge_slave_0: left allmulticast mode [ 325.824939][ T4010] bridge_slave_0: left promiscuous mode [ 325.830629][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.070733][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.104689][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.124443][ T4010] bond0 (unregistering): Released all slaves [ 326.226030][T13424] wg0 speed is unknown, defaulting to 1000 [ 326.281942][ T4010] hsr_slave_0: left promiscuous mode [ 326.287653][ T4010] hsr_slave_1: left promiscuous mode [ 326.301004][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.308404][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.343181][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.350677][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.395206][ T4010] veth1_macvtap: left promiscuous mode [ 326.400725][ T4010] veth0_macvtap: left promiscuous mode [ 326.406230][ T4010] veth1_vlan: left promiscuous mode [ 326.411602][ T4010] veth0_vlan: left promiscuous mode [ 326.602708][ T4010] pim6reg (unregistering): left allmulticast mode [ 326.646083][T13445] loop3: detected capacity change from 0 to 512 [ 326.736622][ T4010] team0 (unregistering): Port device team_slave_1 removed [ 326.758244][ T4010] team0 (unregistering): Port device team_slave_0 removed [ 326.933645][T13445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.024390][T13424] chnl_net:caif_netlink_parms(): no params data found [ 327.117083][T13445] ext4 filesystem being mounted at /root/syzkaller-testdir3604651031/syzkaller.hYSAqk/286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.212835][T13424] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.219946][T13424] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.300602][T13424] bridge_slave_0: entered allmulticast mode [ 327.306930][T13424] bridge_slave_0: entered promiscuous mode [ 327.361262][T13424] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.368321][T13424] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.387975][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.400487][T13424] bridge_slave_1: entered allmulticast mode [ 327.410909][T13424] bridge_slave_1: entered promiscuous mode [ 327.514383][T13424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.541720][T13424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.611415][T13424] team0: Port device team_slave_0 added [ 327.618040][T13424] team0: Port device team_slave_1 added [ 327.678036][T13424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.685024][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.710965][T13424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.763174][T13461] loop3: detected capacity change from 0 to 1764 [ 327.789376][T13424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.796343][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.822253][T13424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.968711][T13424] hsr_slave_0: entered promiscuous mode [ 327.981699][T13472] 9pnet_fd: p9_fd_create_tcp (13472): problem connecting socket to 127.0.0.1 [ 328.012918][T13424] hsr_slave_1: entered promiscuous mode [ 328.018838][T13424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.043191][T13424] Cannot create hsr debugfs directory [ 328.065741][ T29] audit: type=1400 audit(1985610757.524:3053): avc: denied { getopt } for pid=13470 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 328.551956][T13424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.582415][T13424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.612212][T13424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.632017][T13424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.785839][T13424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.817963][T13494] wg0 speed is unknown, defaulting to 1000 [ 328.838624][T13424] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.930085][T12992] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.937193][T12992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.964242][T12992] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.971336][T12992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.068650][T13424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.205348][T13424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.444706][T13424] veth0_vlan: entered promiscuous mode [ 329.482338][T13424] veth1_vlan: entered promiscuous mode [ 329.539429][T13424] veth0_macvtap: entered promiscuous mode [ 329.561343][T13424] veth1_macvtap: entered promiscuous mode [ 329.613077][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.623629][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.633616][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.644179][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.653989][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.664435][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.674266][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.684699][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.694540][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.704957][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.714781][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.725200][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.735013][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.745435][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.755257][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.765752][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.775613][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.786089][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.796043][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.806484][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.009355][T13424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.038226][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.048753][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.058586][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.069062][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.078870][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.089282][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.099083][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.109651][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.119465][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.129953][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.139761][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.150232][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.160036][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.170535][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.180371][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.190870][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.200685][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.211180][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.220986][T13424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.231396][T13424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.504564][T13424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.523471][T13424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.532245][T13424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.540990][T13424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.549667][T13424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.860480][T13529] loop3: detected capacity change from 0 to 1764 [ 330.922288][T13535] loop2: detected capacity change from 0 to 512 [ 331.000283][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.095648][T13535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.196199][T13535] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/2/control supports timestamps until 2038-01-19 (0x7fffffff) [ 331.272620][T13535] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/2/control: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 331.391133][T13535] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor.2: path /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/2/control: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 331.502723][T13535] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/2/control: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 331.647979][T13535] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor.2: path /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/2/control: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 331.876400][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.080967][T13561] syz_tun: entered promiscuous mode [ 332.110272][T13561] batadv_slave_0: entered promiscuous mode [ 332.193876][T13564] loop3: detected capacity change from 0 to 2048 [ 332.253877][T13566] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.277327][T13566] syzkaller0: entered promiscuous mode [ 332.282874][T13566] syzkaller0: entered allmulticast mode [ 332.288965][T13570] loop2: detected capacity change from 0 to 1764 [ 332.303274][T13564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.453100][ T29] audit: type=1400 audit(1985610761.914:3054): avc: denied { watch_reads } for pid=13560 comm="syz-executor.3" path="/root/syzkaller-testdir3604651031/syzkaller.hYSAqk/298/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 332.510747][T13561] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 332.574015][T13561] EXT4-fs (loop3): Remounting filesystem read-only [ 332.616887][T13585] loop1: detected capacity change from 0 to 512 [ 332.633888][T13586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13586 comm=syz-executor.2 [ 332.654353][ T9518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.693774][T13585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.812384][T13585] ext4 filesystem being mounted at /root/syzkaller-testdir831524038/syzkaller.V7H9Bk/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.036541][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.373541][T13612] loop1: detected capacity change from 0 to 512 [ 333.411364][T13612] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.453899][T13612] EXT4-fs (loop1): 1 orphan inode deleted [ 333.459637][T13612] EXT4-fs (loop1): 1 truncate cleaned up [ 333.515722][T13612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.624051][T13612] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 333.694640][T13612] EXT4-fs (loop1): Remounting filesystem read-only [ 333.745740][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.804945][T13625] syz_tun: entered promiscuous mode [ 333.863774][T13625] batadv_slave_0: entered promiscuous mode [ 333.899802][T13625] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 333.972008][T13628] loop2: detected capacity change from 0 to 2048 [ 333.979757][T13625] Cannot create hsr debugfs directory [ 334.022585][T13628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.127756][T13625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 334.234312][T13625] EXT4-fs (loop2): Remounting filesystem read-only [ 334.314371][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.738805][ T29] audit: type=1326 audit(1985610764.194:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff43ca37ee9 code=0x0 [ 335.723344][T13689] sit0: entered allmulticast mode [ 335.761566][T13689] sit0: entered promiscuous mode [ 335.873226][T13683] loop1: detected capacity change from 0 to 8192 [ 335.922645][ T29] audit: type=1400 audit(1985610765.374:3056): avc: denied { bind } for pid=13692 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.095023][T13686] wg0 speed is unknown, defaulting to 1000 [ 336.228773][T13706] block device autoloading is deprecated and will be removed. [ 336.307191][T13686] chnl_net:caif_netlink_parms(): no params data found [ 336.506258][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.513434][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.577135][T13686] bridge_slave_0: entered allmulticast mode [ 336.604008][T13686] bridge_slave_0: entered promiscuous mode [ 336.626500][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.633614][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.686997][T13686] bridge_slave_1: entered allmulticast mode [ 336.706529][T13686] bridge_slave_1: entered promiscuous mode [ 336.757409][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.795224][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.868789][T13686] team0: Port device team_slave_0 added [ 336.895953][T13686] team0: Port device team_slave_1 added [ 336.957771][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.964737][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.990764][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.090897][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.097896][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.123819][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.189001][T13729] loop2: detected capacity change from 0 to 512 [ 337.214937][T13729] EXT4-fs: Ignoring removed bh option [ 337.269275][T13686] hsr_slave_0: entered promiscuous mode [ 337.291933][T13686] hsr_slave_1: entered promiscuous mode [ 337.297965][T13729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.337258][T13686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.370379][T13686] Cannot create hsr debugfs directory [ 337.452783][T13729] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.603676][T13729] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=12, inode=255, rec_len=12, size=2048 fake=1 [ 337.645732][T13686] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.723795][T13739] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=12, inode=255, rec_len=12, size=2048 fake=1 [ 337.750389][ T29] audit: type=1400 audit(1985610767.184:3057): avc: denied { read } for pid=13728 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 337.801420][T13686] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.867801][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.877743][T13686] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.951560][T13686] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.000458][T13743] loop2: detected capacity change from 0 to 512 [ 338.046421][T13743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.052972][T13686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.106006][T13686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.130398][T13743] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.157028][T13686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.218800][T13686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.277814][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.374251][T13686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.419376][T13686] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.470287][T13749] syzkaller0: entered promiscuous mode [ 338.492269][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.499354][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.547935][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.555041][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.635960][T13752] loop2: detected capacity change from 0 to 2048 [ 338.678433][T13686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.688820][T13686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.702982][T13754] loop0: detected capacity change from 0 to 512 [ 338.723642][T13752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.791303][T13754] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 338.882716][T13754] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 338.910713][T13754] EXT4-fs (loop0): 1 truncate cleaned up [ 338.916520][T13754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.953824][T13686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.971143][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.986024][T13754] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz-executor.0: Logical block already allocated [ 339.070314][T13754] EXT4-fs (loop0): Remounting filesystem read-only [ 339.108288][T12866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.203597][T13686] veth0_vlan: entered promiscuous mode [ 339.233239][T13686] veth1_vlan: entered promiscuous mode [ 339.268730][T13686] veth0_macvtap: entered promiscuous mode [ 339.297432][T13686] veth1_macvtap: entered promiscuous mode [ 339.317317][T13778] loop0: detected capacity change from 0 to 1764 [ 339.345085][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.355567][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.365426][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.375868][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.385718][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.396184][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.406013][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.416464][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.426298][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.436724][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.446555][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.456985][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.467052][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.477629][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.487458][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.497881][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.507735][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.518280][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.528148][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.538637][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.548584][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.559061][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.571124][T13686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.582292][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.592773][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.602761][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.613195][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.623031][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.633478][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.643375][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.653815][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.663698][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.674133][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.683948][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.694451][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.704331][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.714781][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.724605][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.735036][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.744858][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.755435][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.765316][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.775754][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.785581][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.796018][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.001301][T13686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.009840][T13686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.018607][T13686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.027320][T13686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.036026][T13686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.939222][T13794] loop2: detected capacity change from 0 to 512 [ 341.057787][T13794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.143010][T13794] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.350079][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.436976][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.446222][T13801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.683425][T13807] loop4: detected capacity change from 0 to 512 [ 341.705997][T13804] loop2: detected capacity change from 0 to 2048 [ 341.725865][T13807] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 341.774563][T13804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.881213][T13813] loop0: detected capacity change from 0 to 1764 [ 341.918665][ T29] audit: type=1400 audit(1985610771.374:3058): avc: denied { map } for pid=13814 comm="syz-executor.4" path="socket:[52089]" dev="sockfs" ino=52089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.980390][ T3198] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 342.070411][ T3198] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 342.082652][ T3198] EXT4-fs (loop2): This should not happen!! Data will be lost [ 342.082652][ T3198] [ 342.092332][ T3198] EXT4-fs (loop2): Total free blocks count 0 [ 342.098299][ T3198] EXT4-fs (loop2): Free/Dirty block details [ 342.104266][ T3198] EXT4-fs (loop2): free_blocks=2415919104 [ 342.110051][ T3198] EXT4-fs (loop2): dirty_blocks=16 [ 342.115259][ T3198] EXT4-fs (loop2): Block reservation details [ 342.121307][ T3198] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 342.196529][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.223714][T13820] loop0: detected capacity change from 0 to 512 [ 342.287454][T13820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.390427][T13820] ext4 filesystem being mounted at /root/syzkaller-testdir3802883914/syzkaller.nNlasX/120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.555079][T12866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.618757][ T29] audit: type=1326 audit(1985610772.074:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.642864][ T29] audit: type=1326 audit(1985610772.074:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.667110][ T29] audit: type=1326 audit(1985610772.074:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.691243][ T29] audit: type=1326 audit(1985610772.074:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.786664][T13829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.857129][ T29] audit: type=1326 audit(1985610772.074:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.881152][ T29] audit: type=1326 audit(1985610772.184:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.905073][ T29] audit: type=1326 audit(1985610772.184:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.929130][ T29] audit: type=1326 audit(1985610772.184:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.953186][ T29] audit: type=1326 audit(1985610772.194:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 342.977236][ T29] audit: type=1326 audit(1985610772.194:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 343.001309][ T29] audit: type=1326 audit(1985610772.194:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 343.025295][ T29] audit: type=1326 audit(1985610772.214:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 343.049266][ T29] audit: type=1326 audit(1985610772.214:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 343.073309][ T29] audit: type=1326 audit(1985610772.214:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8a97ee9 code=0x7ffc0000 [ 343.183802][T13834] loop0: detected capacity change from 0 to 2048 [ 343.356744][T13834] loop0: p2 p3 p7 [ 343.504280][T13843] usb usb9: usbfs: process 13843 (syz-executor.4) did not claim interface 0 before use [ 343.583683][T13845] loop0: detected capacity change from 0 to 128 [ 343.635623][T13845] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.0'. [ 343.645182][T13845] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 343.711982][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.721286][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.869146][T13858] loop0: detected capacity change from 0 to 764 [ 344.224348][T13881] loop2: detected capacity change from 0 to 512 [ 344.505495][T13881] EXT4-fs error (device loop2): ext4_quota_enable:7030: comm syz-executor.2: Bad quota inum: 131076, type: 1 [ 344.592528][T13886] wg0 speed is unknown, defaulting to 1000 [ 344.626425][T13881] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=131076). Please run e2fsck to fix. [ 344.771390][T13881] EXT4-fs (loop2): mount failed [ 344.828779][T13896] loop4: detected capacity change from 0 to 164 [ 344.870569][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.906152][T13896] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 344.950972][T13897] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 345.352137][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.456493][T13919] dvmrp0: entered allmulticast mode [ 345.484480][T13920] wg0 speed is unknown, defaulting to 1000 [ 345.538863][T13922] loop2: detected capacity change from 0 to 1764 [ 345.881355][T13929] wg0 speed is unknown, defaulting to 1000 [ 345.897995][T13927] loop2: detected capacity change from 0 to 1764 [ 345.936629][T13930] delete_channel: no stack [ 346.413307][T13940] loop2: detected capacity change from 0 to 512 [ 346.481024][T13940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.493621][T13940] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.517238][T13943] loop0: detected capacity change from 0 to 512 [ 346.579503][T13943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.631983][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.633564][T13943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.655997][T13943] ext4 filesystem being mounted at /root/syzkaller-testdir3802883914/syzkaller.nNlasX/133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.777721][T12866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.786791][T13967] vxcan2: entered promiscuous mode [ 346.792022][T13967] vxcan2: entered allmulticast mode [ 346.984807][T13972] tipc: Started in network mode [ 346.989688][T13972] tipc: Node identity ac1414aa, cluster identity 4711 [ 347.015058][T13971] loop2: detected capacity change from 0 to 1764 [ 347.042050][T13974] loop4: detected capacity change from 0 to 1764 [ 347.055199][T13972] tipc: Enabled bearer , priority 10 [ 347.121794][T13972] siw: device registration error -23 [ 347.223594][T13978] loop2: detected capacity change from 0 to 512 [ 347.310866][T13978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.370415][T13978] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.531590][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.632968][T13994] usb usb9: usbfs: process 13994 (syz-executor.4) did not claim interface 0 before use [ 347.910624][T14007] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.051227][ T3147] tipc: Node number set to 2886997162 [ 348.163807][T14010] loop4: detected capacity change from 0 to 2048 [ 348.230987][T14012] loop2: detected capacity change from 0 to 1764 [ 348.269142][T14010] loop4: p1 < > p4 [ 348.290753][T14010] loop4: p4 size 8388608 extends beyond EOD, truncated [ 348.424614][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 348.424627][ T29] audit: type=1400 audit(1985610777.884:3130): avc: denied { map } for pid=14008 comm="syz-executor.4" path="socket:[53359]" dev="sockfs" ino=53359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 348.455617][T14010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54346 sclass=netlink_route_socket pid=14010 comm=syz-executor.4 [ 348.583509][T14018] loop2: detected capacity change from 0 to 512 [ 348.645927][T14018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.692657][T14020] wg0 speed is unknown, defaulting to 1000 [ 348.741485][T14018] ext4 filesystem being mounted at /root/syzkaller-testdir3976250822/syzkaller.ZP9LnK/48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.866910][T13424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.199548][ T29] audit: type=1400 audit(1985610778.654:3131): avc: denied { create } for pid=14036 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 349.329548][T14042] loop2: detected capacity change from 0 to 512 [ 349.361887][T14042] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 349.935406][T14056] loop0: detected capacity change from 0 to 512 [ 349.985909][ T29] audit: type=1400 audit(1985610779.444:3132): avc: denied { append } for pid=14055 comm="syz-executor.2" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.052669][T14056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.130475][T14056] ext4 filesystem being mounted at /root/syzkaller-testdir3802883914/syzkaller.nNlasX/144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.400875][T12866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.503566][T14077] geneve1: entered promiscuous mode [ 351.508794][T14077] geneve1: entered allmulticast mode [ 351.612407][T14077] team0: Port device geneve1 added [ 351.752585][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.761931][T14082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.771235][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.890374][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.040396][T14086] loop0: detected capacity change from 0 to 512 [ 352.096426][T14086] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 353.214271][T14091] loop0: detected capacity change from 0 to 512 [ 353.320380][T14091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 353.450596][T14091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.542970][T14091] ext4 filesystem being mounted at /root/syzkaller-testdir3802883914/syzkaller.nNlasX/153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.770893][T12866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.927967][T14104] Invalid option length (844) for dns_resolver key [ 355.631089][T14126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.742977][T14128] loop0: detected capacity change from 0 to 256 [ 355.821069][T14128] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 355.828880][T14128] FAT-fs (loop0): Filesystem has been set read-only [ 356.414609][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.301992][T14139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.414503][T14139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.531595][T14139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.641937][T14139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.742637][T14139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.786558][T14139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.844319][T14139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.897648][T14139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.142631][ T3147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 358.512320][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 358.550540][T14150] loop0: detected capacity change from 0 to 256 [ 358.592478][T14150] tipc: Invalid UDP bearer configuration [ 358.592502][T14150] tipc: Enabling of bearer rejected, failed to enable media [ 359.060465][ T4620] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 359.781963][T14155] loop0: detected capacity change from 0 to 1764 [ 361.051522][T14161] sctp: [Deprecated]: syz-executor.0 (pid 14161) Use of int in maxseg socket option. [ 361.051522][T14161] Use struct sctp_assoc_value instead [ 361.120501][T14162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14162 comm=syz-executor.0 [ 362.135982][T14169] loop0: detected capacity change from 0 to 512 [ 362.200476][T14169] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 362.926187][T14180] loop0: detected capacity change from 0 to 512 [ 362.972697][T14180] bio_check_eod: 12 callbacks suppressed [ 362.972708][T14180] syz-executor.0: attempt to access beyond end of device [ 362.972708][T14180] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 363.040433][T14180] EXT4-fs (loop0): unable to read superblock [ 363.174028][T14181] wg0 speed is unknown, defaulting to 1000 [ 363.367939][T14181] chnl_net:caif_netlink_parms(): no params data found [ 363.602761][T14198] wg0 speed is unknown, defaulting to 1000 [ 363.670468][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.677521][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.722597][T14181] bridge_slave_0: entered allmulticast mode [ 363.740475][T14181] bridge_slave_0: entered promiscuous mode [ 363.766233][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.773381][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.802620][T14181] bridge_slave_1: entered allmulticast mode [ 363.809033][T14181] bridge_slave_1: entered promiscuous mode [ 363.894798][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.954936][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.022642][T14181] team0: Port device team_slave_0 added [ 364.029346][T14181] team0: Port device team_slave_1 added [ 364.107162][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.114115][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.140022][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.223106][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.230048][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.255940][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.383120][T14181] hsr_slave_0: entered promiscuous mode [ 364.423886][T14181] hsr_slave_1: entered promiscuous mode [ 364.442951][T14181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.465097][T14181] Cannot create hsr debugfs directory [ 364.734082][T14181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.754044][ T40] ================================================================== [ 364.755022][T14207] loop0: detected capacity change from 0 to 128 [ 364.762117][ T40] BUG: KCSAN: data-race in __stop_tty / pty_write [ 364.762148][ T40] [ 364.762153][ T40] write to 0xffff88814ca4a9bc of 1 bytes by task 14207 on cpu 1: [ 364.762167][ T40] __stop_tty+0x42/0x90 [ 364.788891][ T40] n_tty_ioctl_helper+0x223/0x240 [ 364.793915][ T40] n_tty_ioctl+0xfd/0x200 [ 364.798235][ T40] tty_ioctl+0x886/0xbe0 [ 364.802472][ T40] __se_sys_ioctl+0xd3/0x150 [ 364.807052][ T40] __x64_sys_ioctl+0x43/0x50 [ 364.811645][ T40] x64_sys_call+0x1581/0x2d70 [ 364.816321][ T40] do_syscall_64+0xc9/0x1c0 [ 364.820821][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.826717][ T40] [ 364.829028][ T40] read to 0xffff88814ca4a9bc of 1 bytes by task 40 on cpu 0: [ 364.836390][ T40] pty_write+0x26/0xa0 [ 364.840461][ T40] tty_put_char+0x8d/0xc0 [ 364.844787][ T40] __process_echoes+0x3a3/0x6b0 [ 364.849634][ T40] n_tty_receive_char+0x608/0x680 [ 364.854653][ T40] n_tty_receive_buf_standard+0x4bd/0x2e30 [ 364.860458][ T40] n_tty_receive_buf_common+0x7e5/0xbd0 [ 364.863485][T14207] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 364.865985][ T40] n_tty_receive_buf2+0x33/0x40 [ 364.880341][ T40] tty_ldisc_receive_buf+0x63/0x100 [ 364.885546][ T40] tty_port_default_receive_buf+0x59/0x90 [ 364.891271][ T40] flush_to_ldisc+0x1ce/0x410 [ 364.895963][ T40] process_scheduled_works+0x483/0x9a0 [ 364.901425][ T40] worker_thread+0x526/0x730 [ 364.906006][ T40] kthread+0x1d1/0x210 [ 364.910073][ T40] ret_from_fork+0x4b/0x60 [ 364.914482][ T40] ret_from_fork_asm+0x1a/0x30 [ 364.919243][ T40] [ 364.921554][ T40] value changed: 0x00 -> 0x01 [ 364.926213][ T40] [ 364.928528][ T40] Reported by Kernel Concurrency Sanitizer on: [ 364.934681][ T40] CPU: 0 PID: 40 Comm: kworker/u8:2 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 364.944736][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 364.954783][ T40] Workqueue: events_unbound flush_to_ldisc [ 364.960586][ T40] ================================================================== [ 364.975923][T14207] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. 2032/12/02 14:33:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 365.021388][ T29] audit: type=1400 audit(1985610794.484:3133): avc: denied { write } for pid=3073 comm="syz-fuzzer" path="pipe:[1585]" dev="pipefs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 365.200791][T14207] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.288881][T14181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0