last executing test programs: 30.819057614s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 29.974806564s ago: executing program 4: write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1}, 0x18) 29.961661535s ago: executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) read(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x40000000}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002640)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f0000002500)=[{&(0x7f00000000c0)=']', 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)=""/2, 0x2}], 0x1, &(0x7f00000046c0)=""/244, 0xf4}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21081}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8000f28, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4369, 0x0, 0x0) 26.951610597s ago: executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="180aaf4b9f0208ab7f0000000000000085000000610000008500000008000000950002006c85799025983e21d8076145000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x90) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0x8) fcntl$addseals(r5, 0x409, 0x8) fallocate(r5, 0x3, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000520001200000000000000000020000000800060000000000"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @dev}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="090000000400000004000000ff0d000006000100cc2800008c000100f40da9217f8b26f4c47305b5eacd3e771db9629ad8f5065c38084ee2c4f4cab184dedebf1999ccfcfc7aa3a23d35670c742542192655f6b8154177d2f9b3444291d9d396d1c5ff6af0ded9aa585c59b8431265c05f0de9f863eb4b9dc70b845cedd7b13feba920967acd553f981418936ddcc0a2d3e6081dee7b1e8483655ca826f51611b6ba0001009e75269d21ef98b8618b7c43b2f69dc178987709d6614b9bbd9aedef17adaf28c0a7c11735a8b2f95bb80c2a959e9de0aa0644e13975ef35f5a56233419b32cc27719f9fcf51114a8d6d7a3f0a72acfbaa66c3811c971f644ec6815563b138a1092da4e4c1a192614b9c4bc1dd9dd349a83e54e8b2af1cf55b92459a173f173edd2dfb9d7e4e08636c835855b436fb31764639caded11fa7dfaf6d25a429f4fab2fe1979d7e2d86ba7530e7e5f0aac65f7a8bf93aa8a0000000000"], 0x19c}, 0x1, 0x0, 0x0, 0x48041}, 0x8810) 26.93061874s ago: executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x10, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300876a55aa9e2d74a0acaba7aa8bf0ce03f67057a1e6b59f12df6ca77eab3aa6b1d4e998612432c1082adf8bc1", @ANYRES32=0x0, @ANYBLOB="37000e006804000000002d1a0000000000000000000000000000000000000000000000000000840f000100ffffffffffff00000000000000"], 0x54}}, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0xc, r4, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000016c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x28, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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") r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0xfffffffd, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0x3}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0xffffffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x6, 0x3ff, 0x6, 0x3, 0xd8}}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x20000810) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) getsockopt(0xffffffffffffffff, 0x0, 0x2711, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$unix(0x1, 0x1, 0x0) io_setup(0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) 2.919347603s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0105303, &(0x7f0000000300)) 2.800728521s ago: executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x29, 0x0, &(0x7f00000002c0)=0x10) 2.313101805s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0x541b, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.299501968s ago: executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) 2.272097312s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 2.257890774s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050015000300000008001240000000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x303e, 0x3, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xfffffffc, 0xabf8, 0xf, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r5 = io_uring_setup(0x7d8, &(0x7f0000000180)={0x0, 0xffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0xffffffffffffff2b}, 0x0) shutdown(r0, 0x1) ptrace(0x10, 0x1) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000380)={0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) ptrace$getenv(0x4204, r8, 0x202, &(0x7f0000000000)) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xca03, 0x10}, 0xc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 1.644107109s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x9, &(0x7f0000000800)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.575248779s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@grpid}, {@abort}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x800003d, 0x7ff) write$binfmt_script(r1, &(0x7f00000000c0), 0xb) lseek(r1, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x88901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x10100, 0x120) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r7}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}}, 0x20) semget(0x3, 0x3, 0x81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 1.516403358s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000eef8b90000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xc0, 0x3, 0x20, 0x1a9, r0, 0x8, '\x00', r4, r5, 0x0, 0x1, 0x0, 0x5}, 0x48) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async) read(r6, 0x0, 0x2006) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) fcntl$setstatus(r6, 0x4, 0x2000) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={'U+', 0x2}, 0x16, 0x1) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) r8 = gettid() tkill(r8, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) keyctl$join(0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240), 0x8, 0x5fc, &(0x7f00000004c0)="$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") 1.495065391s ago: executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x46) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in6=@loopback}, 0x2, @in=@remote}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.474905894s ago: executing program 1: syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @empty}}}, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socket$key(0xf, 0x3, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @link_local}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r7 = io_uring_setup(0x4f04, &(0x7f0000000180)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000120001000000000000a51b000000000a4800000099db7e8f090a010400b6645e480000000000000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c000b40000004000000ddff140000001000010000000000000000000000000a8013dfb511b7b3b4d613f91232ad800f2bf96b8c2f"], 0x70}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1.433839071s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000000940), &(0x7f0000000080)=0x4) 955.774733ms ago: executing program 0: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x244018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x552, &(0x7f0000000580)="$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") set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x8, 0x0, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r4, 0x6000000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x400002a, 0x4000002c, 0x7, 0x215, 0x6, 0x9d, 0x0, 0x66, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001e40)={r5, 0x3, 0x6}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r7 = dup(r6) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r8, 0x40101286, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r5], 0x20}}, 0x0) r10 = semget$private(0x0, 0x4, 0x0) semop(r10, &(0x7f0000001140), 0x0) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000001340)=[0x100]) semctl$GETNCNT(r10, 0x0, 0xe, &(0x7f00000001c0)=""/4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) 809.828506ms ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 705.272032ms ago: executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5103}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x4b0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r3, 0x0) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001640)="99", 0x7}], 0x1}, 0x0) r4 = syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20000}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = getpid() unshare(0x8000000) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) syz_io_uring_setup(0xed0, &(0x7f00000000c0)={0x0, 0xbd5b, 0x8, 0x1, 0x1d2, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r10, r6, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x58, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) 588.8074ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200202}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x40}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x82, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x14) 568.008573ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x2, 0x12) 549.446096ms ago: executing program 0: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0xfe3c, &(0x7f00000012c0)={0x0}, 0xa}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400ca552b2a92af5904000000", @ANYRES32=r0, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x404c083}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r3, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x303301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) connect$inet(r6, &(0x7f00000012c0)={0x2, 0x0, @private}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980), 0xc, 0x0}, 0x4000000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x202040c, 0x531b, 0xffffffff, 0x800}, 0x10) write(r7, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700003d000000000000000007000800", 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000a40)={0x18, 0x0, {0x1, @link_local, 'wlan1\x00'}}, 0x1e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) 519.475861ms ago: executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r0, 0xffffffffffffffff}, &(0x7f0000001180)=0x2, &(0x7f00000011c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x2) syz_read_part_table(0x5e5, &(0x7f0000000000)="$eJzs0z9o1GcYB/D3kpzX6uDi5KJ2cGi7KI49ipW7U1E4zmSRDhUUEW86QTjp0YAW9AbFG8QxSwjckj90yOWGTAkJZA4hQ0ogQ5aWhEIgUPIrl7wp15JCSkJJ4fOBl+fe5/1yz/sOv8D/Wk/4NUk+7fxKMgcnkr9uP+neDDRz+VsXi9dL/SGkdpNf/Nj/Uwjh693jVFxdVuKU4aHT7TebN9PN5Xtbl0/N1Hvi+WBcZ0ZaA519JiT7F/htpOvWnAyj2dmzL19VCm+r2SdLhdra68WFu2MbuVLrTr0xfjt942HMzcXaF+uzUA0vkqfhQSiHcngUKsc0/2Nz9crO+UJz8vFX2/n2u+mrMVc84jsPO//5pff3G7XU4MS5D9eqU/Ol9d69XPkfvi4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6W0ezs2ZevKoW31eyTpUJt7fXiwt2xjVypdafeGL+dvvEw5uZi7Yv1WaiGF+FpeBDKIRUehUqn+cPf//33JDnE/Atd+4/N1Ss75wvNyceZ7Xz73fTV2C/uBy4c5bUHz+9+//NL7+83at98OXHuw7Xq1HxpvXcvdyqE0Hu8owEAAAAAAAAAAAAAAAAAAOBPufyti8Xrpf4QUuHb0Bc+/+X7nk4/yeydp2Lus1hXYn946HT7zebNdHP53tbl72bqP8f+YFxnRloD//lj+Nf+CAAA//+tMpZ3") write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00000100ffffffffffffaaaaaaaaaabb88a8"], 0x3e) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r8 = dup2(r6, r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000140)=ANY=[], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 505.362323ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)) 400.774999ms ago: executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) io_setup(0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @dev}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) acct(0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@journal_path={'journal_path', 0x3d, './bus'}}, {@nomblk_io_submit}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") unshare(0x22020600) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f0000004a40)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f0000002b80)="02", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) getsockopt$inet_int(r3, 0x10d, 0x12, &(0x7f00000000c0), &(0x7f0000000080)=0x4) r7 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x7f, 0x1, {{0x26, 0x4, 0x0, 0x6, 0x98, 0x64, 0x0, 0xc3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp={0x44, 0x14, 0xc, 0x0, 0x1, [0x3, 0xfff, 0x400, 0xfff]}, @ra={0x94, 0x4}, @generic={0x83, 0xc, "8e127c74a3cce05f02f6"}, @ssrr={0x89, 0x7, 0x55, [@remote]}, @noop, @cipso={0x86, 0xf, 0x2, [{0x2, 0x9, "b6321366f120a5"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x96, 0x1, 0x6, [{@loopback, 0x2}, {@loopback, 0x3ff}, {@multicast1, 0xffff8000}, {@rand_addr=0x64010102, 0x80}, {@private=0xa010102, 0x3f}, {@rand_addr=0x64010102, 0x101}, {@remote, 0x2}, {@multicast2, 0x1}]}]}}}}}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7e, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) 332.797909ms ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 304.688683ms ago: executing program 2: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x244018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x552, &(0x7f0000000580)="$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") set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x8, 0x0, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r4, 0x6000000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x400002a, 0x4000002c, 0x7, 0x215, 0x6, 0x9d, 0x0, 0x66, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001e40)={r5, 0x3, 0x6}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r7 = dup(r6) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r8, 0x40101286, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r5], 0x20}}, 0x0) r10 = semget$private(0x0, 0x4, 0x0) semop(r10, &(0x7f0000001140), 0x0) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000001340)=[0x100]) semctl$GETNCNT(r10, 0x0, 0xe, &(0x7f00000001c0)=""/4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) 99.669635ms ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x45}, {0x6}]}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) mq_unlink(&(0x7f0000000000)='\\\x00') setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001a40)="c7741d9adcdf6eedf978a79e18a003bd95ba1d9f91cb6a6a2ef04055e54e713e957f0d148a0478e6924fdcc8e2b0147642fc7cad500dcef8918a07bfd38e5aa8cf34030d5f6e19f90aea834d6c888c966a78de4ccb6aec0778078d796d72225d1f8605c2d4147b26de34938ae43e3e5ed13b163d9b70aa18f87eba6655f01a15c61fe500b29717a96c0513050d15c9f87b3786722247a64345a087f9d4d0916794257aab32cb70f13cf95dbf1a5277022747675367471713ef36a5ae9e5443485a1e3199af2f3eb8ef34e12e9a5f6364755bbaab95374007f41763aff81df1e433a0d493584edecebfe89da4bc0ac7204298edae1534e6ad7397fb934352d2b861bdbab2e8a35e065b78632335fdf359675c5921de7159fcfa288ed81e58840f6db363e9922e14659fbf490ee5ba5cf55db6cd8321fa4c2b97b3083caa3406b3312d2fea409dfe21f1385461ef4521231c6ebdbf02228b25670ab466444f365de8d7fb333c18c79e9f58e791628851923311c3000ab971a9f8ecf9e2fb44c3732a2a09d8f3e240c63e51bd5e47d4ea7956e3d8cdea11ed4239621252ef1980956a402dbebdbdead59a400430d5e5a2a8077ad638addec4ddc1e8da8a41a45a791f132c3d43430841311c5cb31616c2b4aeb6cab1511fe710bed707ba941a1b65655bf638e3431a287e673bcf7bb0a5f92905439baa18d6edace6c1d1d155dfeff38c3df166fc0629c4f7b981ab6f0ebfbc59836ec362a8eaffc0ecd55a9cd63975617d3f189411512aa81c9017c07e72e60b36f91192b2615b65c221df5aa51efe03632b23af4e539ea9ae9f18169381614c4c86f58bd58cc982daef979a01e89739089a9e710f859e0fa9cd07480ccc1806778cfea682f58fe0aecde0d3c6e71241254d0583a004f8d4b4db9210bb0570a7d75ae5c2dbd250461090eda27cb9ae59f1373b030af72cbdb07fda7bb0ea0d488df828aac562dc28b971a3f743c12f0c3dab4d2904a3115573bfc980032bb53651c7adee5c01bfec83b2a4312c89d394b67d4968c95415d1dd15cf5e13969decce197f89865fc806600f9f0c18391ea3b075661a0913e70aa5dc23485707365bdfa5397d10f65f69a558d6eeb768ddeef3339d021a981ee0ef8634be014b952f0c1377599b06698e5814ae08a4b112ba9f8e47f0617149f8097f2ca67be8b7ebb279600a5dc2eb993df1f1ebcff43e1bff342a549230052ca60fed8bf36845f15be60bf86d0aae2de7c7258c57797f7bef0aba130c22b4d9ef93873cc8249de0c5474851ae37b700115e1099c4ed329f9117f7e4e3cc0aa4a700d50ec599276b19f45ac7297202e124f4ce11d998c2087cc910ef4865bbc4b91cfaf58976d3f20c4764bfd2fc8f0b386f048cf32e55be0e45aaeeb49b527c4acb868eaa836cab61a18f36ab02b62824cd2e50f37dd6caaa8cd76a5e209fcd3735f542b51fb4f5dc5e542af8cbfbc295e7817dc2771a629823e942bf4113bc1cbc6f99a2661fa89f44528512d96f269a84a1502366a78c68ef5691821a6ea45dd3c55302cdb6555649a61dde0e580bc9dbd40b966f74f4dd1975673321baa51be961ffaa8b4ec18ac396d23e91f1f10100acc4c469c9c330747b1d4997b2cabefe87a3fe3e85b674019c6d75678777fbceee2d5bc628000be8f797a54de1659f2a75a31a25397f2587a3cc71ad4fe5943e9bd6f75cd23006b8656a4cc881abae2c3ddbdef19f39957b6f93e5d84669929aefc1dc9bb7f84012cb04c3cad144e7ca7fbf9263d52d19f40785c004e1630c386d034759dc5de39da49a2dd7c066a7fe49de3b01c563c2d2369dcd3b48593edb2d3804e42bf1a0298758ce09206f815e6785a978ad6c2a461145437e2e966fc0ed9b2276fad626e8ad1bd928aa4d3b6ae2b5e6c15276a5e878dcf14a21ceb4fde0dd8d207167cbbc64b031c518fee8ec242c13cccb549a1697865d938b5ffef1d71968887941f527c5b16b5d72e07836bfad105a99d5d6a8cd1624b2260adf6c072c5511f92444bbf1fddebe6091f62775691612b2da796cf3545990e71e5791154497584139b44fdb36fd76daf5f481ca8e3f3c4e2e1611b0d274faf66873d3b895545e6d8e43508e7cb59ab135fd1ad7b7e5797b7d4088637a3c7acbe2a3f76443adc403664510d8eb51cba98864e246329c6fc5f6513e64ce0d30b8e55b76102277fd0a412dd3c27f0289ff027539d0b7aed7d7383904e859555d1558de86eb5bb3fe37bcb1d435c6e096fb7861f54f981f8f215b77b61e581e8f51ce1a6abbd632bd8bfd027d52d7fd91185904a93f95fc42154dc51fe75c7b2c88aee56a6ae7a32d2f6477835956c87050a81c6d8a7a7f8831198547acd88adb830c651a86e314b8e601c52c395031925783dea4c009fa0c674f6debd9cf0b37ca296dcb330bd98a0790f4efd3267613360207b991c0d0e51acbfc4b221ac7ee68dbf6a1468ff809007fa2912ffa6a27c5b467fb77b6d4da14e28fe0bd03e43c11ac04eb47327e0d7a8765371f08c71ddf6b0c189a7e68e74428eee9dc4998a0b03dc7ffb93e8f6fa0cbaeb6a8b0968edc67119851ee1416379fbc9c66a85749f2929c65faac5266cf174a0409ab2326a2fc235e457dbe882c50b0b85af5cac2f908b0cef997f1fcec05f81b504c30def6f9cd6449f6d7f8214ed0381a201246ea563431e1437a2834b6774c78b5669b9c090c4cef135f519959aa89c99cd5f606bf680a09adf17a5e5801336286013528bf7747cf6da4672e8ce93e092a9b53610b81be824e2a6b73320cd19b0a952435b21691f746d8a4dea1a78b7631ba017334f4dfd2fa494a270ff2c2fc8d773acfe112b54e56e991ded62770a853ac9031a4216e28ccc8cdfe589d81de9bc244cd08d479555e4531e8f4f3598c7999ae3c37fc225d32d7aa20f878c91fd9bf7296a5bf918ef97bde9db6dc5f891dab8cf74f3ac92ea64c82a57af04b191b42097ef0ac731ddf26cee310a0ae7e4526ef0845f387a1f342c2ef726089a3acc1744a5eeaf7019607b6f23e435de95d7ce8c3516fdd86c0f3e1394e2192b71da91248609004e8901b52616dbb5fa6cd127bf47a8ff7a8a212960e4a2ee04faa32d06e68b5b8a3283c13d5d50e208b801552044329321e022b2f6431093c1506bbb3ad65b4c1547f913fb93951f32e16371dd21a1d81799b740708562500e23ea10aa990a27f5a52827b63ad579f9a8768fb4634fc9998630fd092a40361c0dae603141049e27722d82f1d6b437751ead28c6e3bd307852fe84cc1dce3c67f028cd0b144f08ee22e18f2751c439be4e7c8284e8c46052086027b5d40480b59f34470415e4bb18002806064355bad4ffd5854b683dbf4a69beda0564948bfb74663055a155e8d050ada86eadd5b3dd23b4d72b1125da4369006a781a1f5ec0d80ec584fd5eac1cc9bd72b81f6eb883b0f669ca4e5c58ab13bf7eb69ab72c40bcaf4b57717d8d575662a3fe6be0388d5196c2cd81f36ae4f95242818cef15f6cbb5f0c4bd1a77229f5fa4c7e3469245d284ca609e1979605cfa7c5f63086c9a894b2d327df670c94d8ed0d61b3dfef9cb734a8ca129aac2c4bcce0d365e0b9259bbd91babe7ccb063cca3d5c7ce20c8b5b2e470f95cecb30a28e4c62293dde82e60e083f84cccb4e5dd3c7ee686859f83a030005a523c2882c783f0268de40295c2197096041955c0a17e05284b0f15f0683761562cd737d49d07fb902b639491141265c8bfd3152ebcdd59449a2d43851f49f3d5737bbc0ddb4fa7f63a77a1792aee31771a4ec9db16fa45e5e007e09b90ce4a88a9f1968181d7ca5714204a47e19e58c5159e36ad70adbfb0959f00a31b9fdfa6a9e7ac8b72919b14747a634978eb78ac3173845564c17675c2cdbbde8a4235ebbaf2e331dd7349ba0c72141063b94079ae6802720210832b1902c97bb10a64eb7d70faea76ffb588f932e99cf87a3117fca3ed5685ea2b6e2856c3a3beec1d4e4f19ace316c2f6e66b9f812470edbadc357234ac2e14886b31d6cf5ba04e1235c064667c265dc1e14694a989945ad90a8247e150aa7dcec590779c7925768cc05f9daf96bdaaa8555e570cb460a97865e4545965678eeeafc7907231c9eaf61309282603a388eb2781022d7c521a5e32de61aead8cf2917c2ff8b62dfbafc6f5e77c5729f2dcce4a66a5a724e294e42f33b1f1be97982b2001e9102fcd2cf686845ff7e5778602543c910376d37141258f8a484a23e13f70c841ae281093fcae8684ec94bfdceb85d483a5ba941f4f8497d7cc90a48592a86280331a7a3e07acd2498bb1f0b8ab4a5769cf78b7087be278d4c76d9e656ba5b18694806fb60c3472e19d3fa917771a841f2279a473a937b571a8fc87eea64d88a16215eee18bd445a5cf2f287d8790d7dc501a78e2cc08b699a1f54d0c690fd030502cc420fbf2b5451cae2eb7a41cd132c158423122648d1ff17c4a93727676171cbfa8d192d552a76e725a3da1828dbfcee3224dd342efce1e0340227f71bd2085ddbc6264b07f06e466218d291f60228e78377c45cb1f4d3cf8a807f519497ca60f5c43eb11067b968ec683284693a68a243232f5a669997eb4b2d0da9c81802612b0d746c4914b882399dbd779e879bac906420b16ed405ff38ef5b2cb9dc51f3688de97f9762e594e787eeca6c8bcd814a8d2f31d3b08f70c5fb06940e9580cdb0896bf25da25604a0f3979d02024d00d6be8624db80736f1f11f8d39d83fedaccbda5f543aa8a3767fc198b2cfacb1d5cf3f5b2a3c4827d14fbba890a3a1581114edce3989b18428e502955242c9dd58a70538f89692ab92884a25dc7394d670346f8f718e29f3183f3189de06074b9dad53add84787438c96d298e3595d0b6f214473a3a7463a34510203c60656aa2a28856ce70850579ed3f042b986fcabb3feb43ca568bed3faa3505d5360463106b8d4b9cf655fd0fe1da532ffe705e8440f38460ede9fad224dadf85baebefc783d1f0a15263fe915262b4807629e97b678dd47f283447a52d04d30297144e9f1cb7d0ddbab77ecf0e6939eee9fe8dc9531af69876d32fe6e825204a5d1fcced04c59bc3ea0226f942b4eaa3211ce4cf0a16886e8c2949bf6dedca561bd7dfa81cc1b6ee73bf73947fc027a0b32f2b73c03d6ec2d73c80a1889eaf5fffa631a1f2980c0471e4", 0xe6b}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x10d, 0x80000000, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xa8, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000004c0)='ext4_error\x00', r5}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c000580050020000100000005001d"], 0x54}}, 0x0) 0s ago: executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5103}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x4b0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r3, 0x0) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001640)="99", 0x7}], 0x1}, 0x0) r4 = syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20000}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = getpid() unshare(0x8000000) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) syz_io_uring_setup(0xed0, &(0x7f00000000c0)={0x0, 0xbd5b, 0x8, 0x1, 0x1d2, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r10, r6, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x58, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 000000000000 r/w without journal. Quota mode: writeback. [ 222.090175][T14620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.174222][ T3182] IPVS: starting estimator thread 0... [ 222.182414][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 222.182426][ T29] audit: type=1400 audit(1717302823.854:26384): avc: denied { mounton } for pid=14868 comm="syz-executor.4" path="/root/syzkaller-testdir3074340840/syzkaller.gKtq6U/152/file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 222.264407][T14869] IPVS: using max 2832 ests per chain, 141600 per kthread [ 222.273482][T14876] batadv_slave_1: entered promiscuous mode [ 222.273971][ T29] audit: type=1326 audit(1717302823.934:26385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f069cda2ee9 code=0x0 [ 222.315972][T14880] loop4: detected capacity change from 0 to 128 [ 222.374068][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.383874][T14881] netem: incorrect gi model size [ 222.389019][T14881] netem: change failed [ 222.393207][T14866] batadv_slave_1: left promiscuous mode [ 222.416689][T14885] rdma_rxe: rxe_newlink: failed to add lo [ 222.553036][T14890] loop4: detected capacity change from 0 to 1024 [ 222.560007][T14890] EXT4-fs: Ignoring removed orlov option [ 222.565790][T14890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.576542][T14890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 222.584934][T14890] System zones: 0-1, 3-36 [ 222.590226][T14890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.616976][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.713544][T14902] syzkaller0: entered promiscuous mode [ 222.719153][T14902] syzkaller0: entered allmulticast mode [ 222.731554][T14902] syzkaller0: tun_net_xmit 1280 [ 222.736565][T14902] syzkaller0: create flow: hash 2013047528 index 1 [ 222.745238][T14901] syzkaller0: delete flow: hash 2013047528 index 1 [ 222.831767][T14910] infiniband syz1: set down [ 222.836334][T14910] infiniband syz1: added syzkaller0 [ 222.846941][T14910] RDS/IB: syz1: added [ 222.850992][T14910] smc: adding ib device syz1 with port count 1 [ 222.857254][T14910] smc: ib device syz1 port 1 has pnetid [ 222.902217][T14913] batadv_slave_1: entered promiscuous mode [ 222.995142][T14907] batadv_slave_1: left promiscuous mode [ 223.099363][ T1921] smc: removing ib device syz1 [ 223.136411][T14922] loop2: detected capacity change from 0 to 1024 [ 223.143458][T14922] EXT4-fs: Ignoring removed orlov option [ 223.149196][T14922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.165948][T14922] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 223.174162][T14922] System zones: 0-1, 3-36 [ 223.182930][T14922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.211226][T14620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.299811][T14937] loop2: detected capacity change from 0 to 128 [ 223.307249][T14933] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 223.509153][T14953] batadv_slave_1: entered promiscuous mode [ 223.604451][T14961] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.615351][T14944] batadv_slave_1: left promiscuous mode [ 223.677119][T14965] loop2: detected capacity change from 0 to 2048 [ 223.687292][T14965] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.704786][T14971] pim6reg: entered allmulticast mode [ 223.718660][T14965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.844368][T14983] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 223.861995][T14983] EXT4-fs (loop2): Remounting filesystem read-only [ 223.882061][T14985] loop0: detected capacity change from 0 to 512 [ 223.902576][T14985] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 223.905927][T14992] loop4: detected capacity change from 0 to 512 [ 223.910544][T14985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 223.926446][T14985] EXT4-fs (loop0): orphan cleanup on readonly fs [ 223.933079][T14985] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 223.935034][T14965] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 223.943511][T14985] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 223.951409][T14965] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.955677][T14992] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 223.962725][T14985] EXT4-fs (loop0): 1 truncate cleaned up [ 223.987279][T14992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 223.987486][T14985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.008849][T14992] System zones: 1-12 [ 224.009459][ T29] audit: type=1400 audit(1717302825.684:26386): avc: denied { setopt } for pid=14963 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.012920][T14992] EXT4-fs (loop4): orphan cleanup on readonly fs [ 224.039967][T14992] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz-executor.4: Inode bitmap for bg 0 marked uninitialized [ 224.053979][T14992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.098549][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.109826][T14620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.118449][T14987] lo speed is unknown, defaulting to 1000 [ 224.139848][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.150786][T14985] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 224.163314][T14985] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 224.243349][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.260891][T14589] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.295676][T14987] chnl_net:caif_netlink_parms(): no params data found [ 224.337338][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.337715][ T29] audit: type=1400 audit(1717302826.004:26387): avc: denied { read } for pid=15017 comm="syz-executor.0" path="socket:[56204]" dev="sockfs" ino=56204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 224.373331][T15016] batadv_slave_1: entered promiscuous mode [ 224.381185][T15020] loop4: detected capacity change from 0 to 1024 [ 224.383787][T14987] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.394797][T14987] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.402175][T14987] bridge_slave_0: entered allmulticast mode [ 224.409574][T14987] bridge_slave_0: entered promiscuous mode [ 224.410516][T15020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.416586][T14987] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.434626][T14987] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.441903][T14987] bridge_slave_1: entered allmulticast mode [ 224.448620][T14987] bridge_slave_1: entered promiscuous mode [ 224.455091][T15003] batadv_slave_1: left promiscuous mode [ 224.474096][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.493477][T14987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.507334][T14987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.539074][T14987] team0: Port device team_slave_0 added [ 224.547191][T14987] team0: Port device team_slave_1 added [ 224.563310][T14987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.570310][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.596268][T14987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.612228][T14987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.619283][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.645200][T14987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.673993][T14987] hsr_slave_0: entered promiscuous mode [ 224.680562][T14987] hsr_slave_1: entered promiscuous mode [ 224.686690][T14987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.694274][T14987] Cannot create hsr debugfs directory [ 224.811408][T14987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.821753][T14987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.891877][T15068] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.911050][T14987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.921504][T14987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.942422][T15062] loop4: detected capacity change from 0 to 256 [ 224.961385][T15062] FAT-fs (loop4): IO charset iso8859-15 not found [ 224.988389][T14987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.988783][T15076] loop0: detected capacity change from 0 to 256 [ 224.998707][T14987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.088828][T14987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.099182][T14987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.149334][T14987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.158218][T14987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.169700][T14987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.182037][T14987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.192186][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.250670][T14987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.276731][T14987] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.288449][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.295549][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.313714][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.320829][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.352213][T14987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.389587][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.435969][T14987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.511244][T14987] veth0_vlan: entered promiscuous mode [ 225.520253][T14987] veth1_vlan: entered promiscuous mode [ 225.540953][T14987] veth0_macvtap: entered promiscuous mode [ 225.549010][T14987] veth1_macvtap: entered promiscuous mode [ 225.562246][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.572804][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.582680][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.593228][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.603128][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.613588][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.623518][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.634164][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.644100][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.654551][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.664494][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.669256][T15122] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.674926][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.674946][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.686658][T15124] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15124 comm=syz-executor.4 [ 225.694008][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.708144][T15122] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (1578155) [ 225.717204][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.747698][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.757525][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.768011][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.779152][T14987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.793746][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.804251][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.814228][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.824780][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.834596][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.845020][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.855536][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.866000][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.875902][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.886549][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.896425][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.907037][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.916989][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.927517][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.937424][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.947901][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.957706][T14987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.968115][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.979882][T14987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.993283][T14987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.002309][T14987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.011173][T14987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.014770][T15136] loop4: detected capacity change from 0 to 256 [ 226.020228][T14987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.395793][T15170] loop0: detected capacity change from 0 to 1024 [ 226.402660][T15170] EXT4-fs: Ignoring removed orlov option [ 226.408516][T15170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.416458][T15170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 226.424646][T15170] System zones: 0-1, 3-36 [ 226.430048][T15170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.475038][T14589] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.501152][T15177] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.698906][T15200] loop4: detected capacity change from 0 to 1024 [ 226.706089][T15200] EXT4-fs: Ignoring removed orlov option [ 226.711814][T15200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.720005][T15200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 226.730475][T15200] System zones: 0-1, 3-36 [ 226.735757][T15200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.767748][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.959676][ T29] audit: type=1400 audit(1717302828.624:26388): avc: denied { mounton } for pid=15208 comm="syz-executor.3" path="/root/syzkaller-testdir3860888876/syzkaller.ThVk8l/10/file0" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 226.959757][T15209] 9pnet_fd: Insufficient options for proto=fd [ 227.028117][ T29] audit: type=1400 audit(1717302828.694:26389): avc: denied { setopt } for pid=15212 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.159275][T15225] loop3: detected capacity change from 0 to 1024 [ 227.162146][T15227] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.175035][T15227] vlan0: entered allmulticast mode [ 227.180199][T15227] veth0_vlan: entered allmulticast mode [ 227.186402][T15225] EXT4-fs: Ignoring removed orlov option [ 227.192177][T15225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.200840][T15225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 227.210467][T15225] System zones: 0-1, 3-36 [ 227.216497][T15225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.220272][T15230] loop4: detected capacity change from 0 to 256 [ 227.244773][T14987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.388687][T15239] loop4: detected capacity change from 0 to 128 [ 227.396093][T15239] FAT-fs (loop4): Unrecognized mount option "à" or missing value [ 227.499373][T15243] vlan0: entered allmulticast mode [ 227.504642][T15243] veth0_vlan: entered allmulticast mode [ 227.631650][ T29] audit: type=1326 audit(1717302829.294:26390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7970a7cee9 code=0x0 [ 227.665923][T15258] loop4: detected capacity change from 0 to 1024 [ 227.672617][T15258] EXT4-fs: Ignoring removed orlov option [ 227.678288][T15258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.686491][T15258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 227.695059][T15258] System zones: 0-1, 3-36 [ 227.700105][T15258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.726571][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.747174][T15264] loop3: detected capacity change from 0 to 512 [ 227.777874][T15264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.784392][T15268] loop4: detected capacity change from 0 to 256 [ 227.790479][T15264] ext4 filesystem being mounted at /root/syzkaller-testdir3860888876/syzkaller.ThVk8l/23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.820448][T14987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.151971][T15291] loop4: detected capacity change from 0 to 1024 [ 228.166660][T15291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.177426][T15295] loop3: detected capacity change from 0 to 1024 [ 228.185729][T15295] EXT4-fs: Ignoring removed orlov option [ 228.191451][T15295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.193129][T15295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 228.206655][T15295] System zones: 0-1, 3-36 [ 228.211817][T15295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.227752][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.243306][T14987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.302377][T15300] loop3: detected capacity change from 0 to 256 [ 228.354903][T15303] rdma_op ffff88814302d580 conn xmit_rdma 0000000000000000 [ 228.452042][T15317] lo speed is unknown, defaulting to 1000 [ 228.578183][T15335] loop3: detected capacity change from 0 to 512 [ 228.587587][T15335] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 228.600766][T15335] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 228.613960][T15335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.656884][T15338] loop4: detected capacity change from 0 to 164 [ 228.665324][T15338] isofs_fill_super: get root inode failed [ 228.684490][T15335] loop3: detected capacity change from 512 to 64 [ 228.691851][T15335] bio_check_eod: 13 callbacks suppressed [ 228.691865][T15335] syz-executor.3: attempt to access beyond end of device [ 228.691865][T15335] loop3: rw=2051, sector=250, nr_sectors = 2 limit=64 [ 228.711292][T15335] EXT4-fs (loop3): discard request in group:0 block:124 count:1 failed with -5 [ 228.720408][T15335] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 228.722010][T15335] syz-executor.3: attempt to access beyond end of device [ 228.722010][T15335] loop3: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 228.742844][T15335] EXT4-fs (loop3): discard request in group:0 block:42 count:1 failed with -5 [ 228.753060][T15335] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 228.761532][T15335] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 19: block 125:freeing already freed block (bit 124); block bitmap corrupt. [ 228.769224][T15341] loop4: detected capacity change from 0 to 512 [ 228.777348][T15335] EXT4-fs (loop3): pa ffff8881057a7930: logic 0, phys. 65, len 64 [ 228.790327][T15335] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5368: group 0, free 16, pa_free 15 [ 228.795876][T15341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.801667][T15335] EXT4-fs error (device loop3): ext4_free_branches:1043: inode #19: block 42: comm syz-executor.3: Read failure [ 228.815133][T15341] ext4 filesystem being mounted at /root/syzkaller-testdir3074340840/syzkaller.gKtq6U/209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.837253][T14987] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.3: error -12 reading directory block [ 228.843959][T15341] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 228.868100][T14987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.884436][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.210901][T15363] __nla_validate_parse: 5 callbacks suppressed [ 229.210917][T15363] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.322480][T15367] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.551610][T15373] loop4: detected capacity change from 0 to 1024 [ 229.559072][T15373] EXT4-fs: quotafile must be on filesystem root [ 229.753643][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.763058][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.772287][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.781500][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.790836][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.510747][T14240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.570592][T14240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.628283][T14240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.649029][T15396] loop4: detected capacity change from 0 to 512 [ 231.663606][T15384] lo speed is unknown, defaulting to 1000 [ 231.672832][T14240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.751647][T14240] bridge_slave_1: left allmulticast mode [ 231.757368][T14240] bridge_slave_1: left promiscuous mode [ 231.763058][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.785056][T14240] bridge_slave_0: left allmulticast mode [ 231.790731][T14240] bridge_slave_0: left promiscuous mode [ 231.796369][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.907208][T14240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.917496][T14240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.927691][T14240] bond0 (unregistering): Released all slaves [ 231.950691][T15384] chnl_net:caif_netlink_parms(): no params data found [ 231.984300][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.991475][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.000120][T15384] bridge_slave_0: entered allmulticast mode [ 232.006752][T15384] bridge_slave_0: entered promiscuous mode [ 232.013536][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.020641][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.028261][T15384] bridge_slave_1: entered allmulticast mode [ 232.035188][T15384] bridge_slave_1: entered promiscuous mode [ 232.054007][T15415] bond_slave_0: entered promiscuous mode [ 232.059701][T15415] bond_slave_1: entered promiscuous mode [ 232.066894][T15415] macsec1: entered promiscuous mode [ 232.072116][T15415] bond0: entered promiscuous mode [ 232.077351][T15415] macsec1: entered allmulticast mode [ 232.082633][T15415] bond0: entered allmulticast mode [ 232.087918][T15415] bond_slave_0: entered allmulticast mode [ 232.093636][T15415] bond_slave_1: entered allmulticast mode [ 232.101693][T15415] bond0: left allmulticast mode [ 232.106715][T15415] bond_slave_0: left allmulticast mode [ 232.112227][T15415] bond_slave_1: left allmulticast mode [ 232.117738][T15415] bond0: left promiscuous mode [ 232.122689][T15415] bond_slave_0: left promiscuous mode [ 232.128103][T15415] bond_slave_1: left promiscuous mode [ 232.142999][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.154194][T14240] hsr_slave_0: left promiscuous mode [ 232.160753][T14240] hsr_slave_1: left promiscuous mode [ 232.168012][T14240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.175541][T14240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.184388][T14240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.191932][T14240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.202191][T14240] veth1_macvtap: left promiscuous mode [ 232.207749][T14240] veth0_macvtap: left promiscuous mode [ 232.213258][T14240] veth1_vlan: left promiscuous mode [ 232.218533][T14240] veth0_vlan: left allmulticast mode [ 232.223805][T14240] veth0_vlan: left promiscuous mode [ 232.305502][T14240] team0 (unregistering): Port device team_slave_1 removed [ 232.316233][T14240] team0 (unregistering): Port device team_slave_0 removed [ 232.352379][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.372237][T15384] team0: Port device team_slave_0 added [ 232.378898][T15384] team0: Port device team_slave_1 added [ 232.393636][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.400743][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.426742][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.438398][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.445453][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.471399][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.498116][T15384] hsr_slave_0: entered promiscuous mode [ 232.504191][T15384] hsr_slave_1: entered promiscuous mode [ 232.511771][T15384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.519407][T15384] Cannot create hsr debugfs directory [ 232.796733][T15384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.805632][T15384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.814131][T15384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.822782][T15384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.869493][T15384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.883929][T15384] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.894613][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.901824][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.914993][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.922058][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.943428][T15384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.953843][T15384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.015119][T15384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.081598][T15384] veth0_vlan: entered promiscuous mode [ 233.090047][T15384] veth1_vlan: entered promiscuous mode [ 233.111039][T15384] veth0_macvtap: entered promiscuous mode [ 233.119286][T15384] veth1_macvtap: entered promiscuous mode [ 233.131197][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.141657][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.151544][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.162105][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.172119][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.182601][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.192440][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.202960][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.212783][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.223220][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.233079][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.243532][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.253712][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.264245][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.274148][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.284635][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.294462][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.304928][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.316093][T15384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.327289][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.337783][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.347807][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.358441][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.368272][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.378729][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.388517][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.399006][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.408826][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.419256][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.429077][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.439506][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.449396][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.459965][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.469777][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.480192][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.490025][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.500501][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.511653][T15384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.526381][T15384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.535271][T15384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.543949][T15384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.552753][T15384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.597589][T15436] syzkaller0: entered promiscuous mode [ 233.603066][T15436] syzkaller0: entered allmulticast mode [ 233.618138][T15436] syzkaller0: tun_net_xmit 1280 [ 233.623177][T15436] syzkaller0: create flow: hash 2013047528 index 1 [ 233.644979][T15435] syzkaller0: delete flow: hash 2013047528 index 1 [ 233.764604][ T29] audit: type=1326 audit(1717302835.434:26391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15448 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f16819ee9 code=0x0 [ 234.079114][T15460] loop4: detected capacity change from 0 to 256 [ 235.089669][T15474] syzkaller0: entered promiscuous mode [ 235.095234][T15474] syzkaller0: entered allmulticast mode [ 235.107965][T15474] syzkaller0: tun_net_xmit 1280 [ 235.112894][T15474] syzkaller0: create flow: hash 2013047528 index 1 [ 235.125192][T15473] syzkaller0: delete flow: hash 2013047528 index 1 [ 235.450931][T15489] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 236.405724][T15503] syzkaller0: entered promiscuous mode [ 236.411208][T15503] syzkaller0: entered allmulticast mode [ 236.421595][T15503] syzkaller0: create flow: hash 1504733948 index 1 [ 236.448585][T15502] syzkaller0: delete flow: hash 1504733948 index 1 [ 236.553354][T14242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.608416][T14242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.668580][T14242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.692904][T15517] lo speed is unknown, defaulting to 1000 [ 236.720502][T14242] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.788449][T15517] chnl_net:caif_netlink_parms(): no params data found [ 236.825232][T15517] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.832365][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.839889][T15517] bridge_slave_0: entered allmulticast mode [ 236.846665][T15517] bridge_slave_0: entered promiscuous mode [ 236.853563][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.860757][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.868015][T15517] bridge_slave_1: entered allmulticast mode [ 236.874333][T15517] bridge_slave_1: entered promiscuous mode [ 236.902874][T15517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.912392][T14242] bridge_slave_1: left allmulticast mode [ 236.918115][T14242] bridge_slave_1: left promiscuous mode [ 236.923830][T14242] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.933288][T14242] bridge_slave_0: left allmulticast mode [ 236.938997][T14242] bridge_slave_0: left promiscuous mode [ 236.944819][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.458975][T14242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.467952][T14242] bond_slave_0: left allmulticast mode [ 237.475106][T14242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.484152][T14242] bond_slave_1: left allmulticast mode [ 237.491097][T14242] bond0 (unregistering): Released all slaves [ 237.500338][T15517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.527907][T15517] team0: Port device team_slave_0 added [ 237.535076][T15517] team0: Port device team_slave_1 added [ 237.551396][T15517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.558434][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.584544][T15517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.595891][T15517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.602958][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.628913][T15517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.663636][T14242] hsr_slave_0: left promiscuous mode [ 237.669939][T14242] hsr_slave_1: left promiscuous mode [ 237.676107][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.683516][T14242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.691762][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.699236][T14242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.708066][T14242] batadv0: left promiscuous mode [ 237.713111][T14242] veth0_vlan: left allmulticast mode [ 237.718414][T14242] veth0_vlan: left promiscuous mode [ 237.792764][T14242] team0 (unregistering): Port device team_slave_1 removed [ 237.803705][T14242] team0 (unregistering): Port device team_slave_0 removed [ 237.839349][T15517] hsr_slave_0: entered promiscuous mode [ 237.845448][T15517] hsr_slave_1: entered promiscuous mode [ 237.851281][T15517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.858917][T15517] Cannot create hsr debugfs directory [ 238.139719][T15517] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.149158][T15517] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.157748][T15517] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.166379][T15517] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.207091][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.220730][T15517] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.236390][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.243544][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.252033][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.259237][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.316709][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.378638][T15557] loop4: detected capacity change from 0 to 128 [ 238.385857][T15557] FAT-fs (loop4): Unrecognized mount option "0x0000000000000003ÿÿÿÿÿÿÿÿ{k; îü“ðXOUÊDõ2þÚQ;[TH”tîëÎÞ´—oVfgïð[uÊÞÌ{jŒti_)‡…'ø%aÐkUÌ’@´0ø>¸ÁQ”™!›á0Ä@:ùy–Il 駇1FÃ'©‘´‰ÏO^È•±" or missing value [ 238.389097][T15517] veth0_vlan: entered promiscuous mode [ 238.415711][T15517] veth1_vlan: entered promiscuous mode [ 238.431856][T15517] veth0_macvtap: entered promiscuous mode [ 238.439605][T15517] veth1_macvtap: entered promiscuous mode [ 238.452087][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.462584][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.472517][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.482974][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.492832][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.503282][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.513136][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.523572][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.533585][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.544172][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.554001][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.564410][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.574208][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.584667][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.594479][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.605088][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.615020][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.625461][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.637504][T15517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.649285][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.659946][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.669781][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.680229][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.690277][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.700868][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.710719][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.721223][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.731126][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.741565][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.751489][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.761939][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.771885][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.782514][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.792341][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.802905][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.812740][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.823205][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.825836][T15517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.844059][T15517] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.853040][T15517] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.861885][T15517] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.870594][T15517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.958225][T15573] bond_slave_0: entered promiscuous mode [ 238.963897][T15573] bond_slave_1: entered promiscuous mode [ 238.969800][T15573] macsec1: entered promiscuous mode [ 238.975118][T15573] bond0: entered promiscuous mode [ 238.980397][T15573] macsec1: entered allmulticast mode [ 238.985685][T15573] bond0: entered allmulticast mode [ 238.990838][T15573] bond_slave_0: entered allmulticast mode [ 238.996608][T15573] bond_slave_1: entered allmulticast mode [ 239.003936][T15573] bond0: left allmulticast mode [ 239.008943][T15573] bond_slave_0: left allmulticast mode [ 239.014510][T15573] bond_slave_1: left allmulticast mode [ 239.019965][T15573] bond0: left promiscuous mode [ 239.024924][T15573] bond_slave_0: left promiscuous mode [ 239.030298][T15573] bond_slave_1: left promiscuous mode [ 239.096859][ T29] audit: type=1400 audit(1717302840.764:26392): avc: denied { mount } for pid=15578 comm="syz-executor.1" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 239.219458][T15600] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.849639][T15630] loop3: detected capacity change from 0 to 256 [ 239.863159][T15630] FAT-fs (loop3): Directory bread(block 64) failed [ 239.869890][T15630] FAT-fs (loop3): Directory bread(block 65) failed [ 239.876569][T15630] FAT-fs (loop3): Directory bread(block 66) failed [ 239.883508][T15630] FAT-fs (loop3): Directory bread(block 67) failed [ 239.890232][T15630] FAT-fs (loop3): Directory bread(block 68) failed [ 239.896968][T15630] FAT-fs (loop3): Directory bread(block 69) failed [ 239.903589][T15630] FAT-fs (loop3): Directory bread(block 70) failed [ 239.910206][T15630] FAT-fs (loop3): Directory bread(block 71) failed [ 239.916870][T15630] FAT-fs (loop3): Directory bread(block 72) failed [ 239.923443][T15630] FAT-fs (loop3): Directory bread(block 73) failed [ 240.155369][T15641] loop3: detected capacity change from 0 to 256 [ 240.210014][T15660] bridge0: port 1(syz_tun) entered blocking state [ 240.216562][T15660] bridge0: port 1(syz_tun) entered disabled state [ 240.219201][ T29] audit: type=1326 audit(1717302841.894:26393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 240.223575][T15660] syz_tun: entered allmulticast mode [ 240.289413][T15662] syzkaller0: entered promiscuous mode [ 240.294971][T15662] syzkaller0: entered allmulticast mode [ 240.307591][T15662] syzkaller0: create flow: hash 1504733948 index 1 [ 240.323751][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.333094][T15668] syz_tun: entered promiscuous mode [ 240.340530][T15659] syzkaller0: delete flow: hash 1504733948 index 1 [ 240.412652][T15675] sit0: entered promiscuous mode [ 240.423701][T15675] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 240.431930][T15675] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.464567][T15680] loop3: detected capacity change from 0 to 128 [ 240.472187][T15680] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 240.489627][T15680] syz-executor.3: attempt to access beyond end of device [ 240.489627][T15680] loop3: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 240.503511][T15680] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 240.512239][T15680] syz-executor.3: attempt to access beyond end of device [ 240.512239][T15680] loop3: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 240.535556][ T1921] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 240.581077][T15686] rtc_cmos 00:00: Alarms can be up to one day in the future [ 240.696222][T15690] loop4: detected capacity change from 0 to 256 [ 240.749657][ T29] audit: type=1400 audit(1717303098.421:26394): avc: denied { create } for pid=15703 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.785285][T15711] loop4: detected capacity change from 0 to 1764 [ 240.922477][T15717] syzkaller0: entered promiscuous mode [ 240.928099][T15717] syzkaller0: entered allmulticast mode [ 240.939425][T15717] syzkaller0: create flow: hash 1504733948 index 1 [ 240.974672][T15716] syzkaller0: delete flow: hash 1504733948 index 1 [ 241.165991][T15724] bond_slave_0: entered promiscuous mode [ 241.171695][T15724] bond_slave_1: entered promiscuous mode [ 241.177468][T15724] macsec1: entered promiscuous mode [ 241.182679][T15724] bond0: entered promiscuous mode [ 241.187935][T15724] macsec1: entered allmulticast mode [ 241.193204][T15724] bond0: entered allmulticast mode [ 241.198391][T15724] bond_slave_0: entered allmulticast mode [ 241.204096][T15724] bond_slave_1: entered allmulticast mode [ 241.212021][T15724] bond0: left allmulticast mode [ 241.216953][T15724] bond_slave_0: left allmulticast mode [ 241.222409][T15724] bond_slave_1: left allmulticast mode [ 241.227924][T15724] bond0: left promiscuous mode [ 241.232906][T15724] bond_slave_0: left promiscuous mode [ 241.238297][T15724] bond_slave_1: left promiscuous mode [ 241.573101][ T29] audit: type=1326 audit(1717303099.241:26395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 241.679366][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.781426][T15776] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.948129][T15780] loop4: detected capacity change from 0 to 256 [ 242.117141][ T29] audit: type=1326 audit(1717303099.791:26396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f618da6bee9 code=0x0 [ 242.599060][T15812] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 242.782994][T15824] loop3: detected capacity change from 0 to 256 [ 242.840134][ T29] audit: type=1326 audit(1717303100.511:26397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 242.863863][T15846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 242.949511][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.989372][T15863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 242.997132][ T29] audit: type=1326 audit(1717303100.671:26398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618da6bee9 code=0x7ffc0000 [ 243.022610][ T29] audit: type=1326 audit(1717303100.671:26399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618da6bee9 code=0x7ffc0000 [ 243.046805][ T29] audit: type=1326 audit(1717303100.671:26400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f618da6bee9 code=0x7ffc0000 [ 243.070993][ T29] audit: type=1326 audit(1717303100.671:26401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618da6bee9 code=0x7ffc0000 [ 243.074575][T15867] loop4: detected capacity change from 0 to 256 [ 243.462473][T15898] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 243.887716][T15909] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 243.896093][T15909] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 243.904569][T15909] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 244.469157][T15978] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.478661][T15978] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.488614][T15978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.505794][T15978] loop4: detected capacity change from 0 to 256 [ 244.920707][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 244.920717][ T29] audit: type=1400 audit(1717303102.591:26451): avc: denied { listen } for pid=15995 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.927122][T15996] loop4: detected capacity change from 0 to 512 [ 244.954161][T15996] EXT4-fs: Ignoring removed nobh option [ 244.961289][T15996] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 244.970283][T15996] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #13: comm syz-executor.4: casefold flag without casefold feature [ 244.985279][T15996] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 244.998262][T15996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.006627][T13303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.075558][T16004] sg_write: process 133 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. [ 245.090831][T16006] gretap0: entered promiscuous mode [ 245.099213][T16006] erspan0: entered promiscuous mode [ 245.108967][T16008] batadv0: entered promiscuous mode [ 245.213641][T16014] loop4: detected capacity change from 0 to 256 [ 245.230668][T16014] FAT-fs (loop4): codepage cp936 not found [ 245.277242][T16014] loop4: detected capacity change from 0 to 512 [ 245.283759][T16014] EXT4-fs: test_dummy_encryption option not supported [ 245.679623][T16070] pim6reg1: entered promiscuous mode [ 245.684948][T16070] pim6reg1: entered allmulticast mode [ 246.937997][T16128] loop3: detected capacity change from 0 to 512 [ 246.946109][T16128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.957443][T16128] EXT4-fs (loop3): 1 truncate cleaned up [ 246.963405][T16128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.976479][T16127] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 246.977190][ T29] audit: type=1400 audit(1717303104.651:26452): avc: denied { rename } for pid=16126 comm="syz-executor.3" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.013682][ T29] audit: type=1400 audit(1717303104.651:26453): avc: denied { unlink } for pid=16126 comm="syz-executor.3" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 247.041390][T15384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.166689][T16134] loop3: detected capacity change from 0 to 512 [ 247.580855][T16158] netlink: 500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.601801][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.795051][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.812851][T16186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.830854][T16186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.838666][T16186] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 247.850616][T16186] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 247.868077][T16189] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.877454][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.059489][T16210] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.071144][ T29] audit: type=1326 audit(1717303105.741:26454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.095256][ T29] audit: type=1326 audit(1717303105.741:26455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.119457][ T29] audit: type=1326 audit(1717303105.741:26456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.143557][ T29] audit: type=1326 audit(1717303105.741:26457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.167691][ T29] audit: type=1326 audit(1717303105.741:26458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.191917][ T29] audit: type=1326 audit(1717303105.741:26459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.216032][ T29] audit: type=1326 audit(1717303105.741:26460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16209 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x7ffc0000 [ 248.299021][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.453496][T16243] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 248.471769][T16243] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.486368][T16245] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 248.501702][T16245] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.586675][T16247] syzkaller0: entered promiscuous mode [ 248.592267][T16247] syzkaller0: entered allmulticast mode [ 248.803378][T16256] pim6reg1: entered promiscuous mode [ 248.808714][T16256] pim6reg1: entered allmulticast mode [ 249.870383][T16292] syzkaller0: entered promiscuous mode [ 249.875918][T16292] syzkaller0: entered allmulticast mode [ 250.699228][T14242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.763271][T14242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.830961][T14242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.870017][T16304] lo speed is unknown, defaulting to 1000 [ 250.893048][T14242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.969065][T14242] bridge_slave_1: left allmulticast mode [ 250.974880][T14242] bridge_slave_1: left promiscuous mode [ 250.980492][T14242] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.988400][T14242] bridge_slave_0: left allmulticast mode [ 250.994120][T14242] bridge_slave_0: left promiscuous mode [ 250.999785][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.117307][T14242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.121905][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 251.121918][ T29] audit: type=1400 audit(1717303108.791:26477): avc: denied { connect } for pid=16341 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.156717][T14242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.168954][T14242] bond0 (unregistering): Released all slaves [ 251.179163][T16304] chnl_net:caif_netlink_parms(): no params data found [ 251.215928][T16304] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.222996][T16304] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.230306][T16304] bridge_slave_0: entered allmulticast mode [ 251.236876][T16304] bridge_slave_0: entered promiscuous mode [ 251.243852][T16304] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.251005][T16304] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.258288][T16304] bridge_slave_1: entered allmulticast mode [ 251.264853][T16304] bridge_slave_1: entered promiscuous mode [ 251.303253][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.314877][T14242] hsr_slave_0: left promiscuous mode [ 251.320511][T14242] hsr_slave_1: left promiscuous mode [ 251.326716][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.334178][T14242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.341919][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.349368][T14242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.358888][T14242] veth1_macvtap: left promiscuous mode [ 251.364479][T14242] veth0_macvtap: left promiscuous mode [ 251.369976][T14242] veth1_vlan: left promiscuous mode [ 251.441336][T14242] team0 (unregistering): Port device team_slave_1 removed [ 251.451795][T14242] team0 (unregistering): Port device team_slave_0 removed [ 251.489841][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.519150][T16304] team0: Port device team_slave_0 added [ 251.528837][T16304] team0: Port device team_slave_1 added [ 251.548052][T16304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.555044][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.581006][T16304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.623906][T16360] syzkaller0: entered promiscuous mode [ 251.629576][T16360] syzkaller0: entered allmulticast mode [ 251.636539][T16363] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 251.644673][T16363] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.656474][T16304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.663495][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.689587][T16304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.754228][T16304] hsr_slave_0: entered promiscuous mode [ 251.761227][T16304] hsr_slave_1: entered promiscuous mode [ 251.768745][T16304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.778362][T16304] Cannot create hsr debugfs directory [ 251.916282][T14242] IPVS: stop unused estimator thread 0... [ 251.985179][T16394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.013041][T16396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.023556][T16396] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 252.035399][T16396] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 252.058333][T14242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.111992][T16399] lo speed is unknown, defaulting to 1000 [ 252.122070][T14242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.179987][T16304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.195111][T14242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.206848][T16304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.228400][T16304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.239930][T16304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.258468][T14242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.286891][T16399] chnl_net:caif_netlink_parms(): no params data found [ 252.340446][T14242] bridge_slave_1: left allmulticast mode [ 252.346294][T14242] bridge_slave_1: left promiscuous mode [ 252.351989][T14242] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.359993][T14242] bridge_slave_0: left allmulticast mode [ 252.365894][T14242] bridge_slave_0: left promiscuous mode [ 252.371606][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.473985][T14242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.486973][T14242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.497684][T14242] bond0 (unregistering): Released all slaves [ 252.511023][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.518153][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.525795][T16399] bridge_slave_0: entered allmulticast mode [ 252.532340][T16399] bridge_slave_0: entered promiscuous mode [ 252.543781][T16399] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.545468][T16420] loop4: detected capacity change from 0 to 512 [ 252.550939][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.564467][T16399] bridge_slave_1: entered allmulticast mode [ 252.571084][T16399] bridge_slave_1: entered promiscuous mode [ 252.589698][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.600503][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.612070][T16420] __nla_validate_parse: 3 callbacks suppressed [ 252.612084][T16420] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.653466][T14242] hsr_slave_0: left promiscuous mode [ 252.659187][T14242] hsr_slave_1: left promiscuous mode [ 252.666480][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.673945][T14242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.682767][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.690380][T14242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.699976][T14242] veth1_macvtap: left promiscuous mode [ 252.705580][T14242] veth0_macvtap: left promiscuous mode [ 252.711120][T14242] veth1_vlan: left promiscuous mode [ 252.716376][T14242] veth0_vlan: left promiscuous mode [ 252.801219][T14242] team0 (unregistering): Port device team_slave_1 removed [ 252.812270][T14242] team0 (unregistering): Port device team_slave_0 removed [ 252.855161][T16399] team0: Port device team_slave_0 added [ 252.869644][T16399] team0: Port device team_slave_1 added [ 252.918890][T16422] syzkaller0: entered promiscuous mode [ 252.924617][T16422] syzkaller0: entered allmulticast mode [ 252.954010][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.961019][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.987005][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.000112][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.007180][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.033221][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.053946][T16304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.079814][T16304] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.094656][T16399] hsr_slave_0: entered promiscuous mode [ 253.101023][T16399] hsr_slave_1: entered promiscuous mode [ 253.107340][T16399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.116690][T16399] Cannot create hsr debugfs directory [ 253.141786][ T3150] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.148992][ T3150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.178286][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.185489][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.188536][T16438] 9pnet_virtio: no channels available for device syz [ 253.200511][ T29] audit: type=1400 audit(1717303110.861:26478): avc: denied { mounton } for pid=16437 comm="syz-executor.1" path="/root/syzkaller-testdir1520643860/syzkaller.Q8R2ki/104/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 253.311984][T16304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.373276][T16304] veth0_vlan: entered promiscuous mode [ 253.385294][T16304] veth1_vlan: entered promiscuous mode [ 253.404297][T16304] veth0_macvtap: entered promiscuous mode [ 253.415366][T16304] veth1_macvtap: entered promiscuous mode [ 253.426814][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.437312][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.447251][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.457685][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.467525][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.478015][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.487930][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.498440][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.508524][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.518996][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.528833][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.539304][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.549144][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.559655][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.569533][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.579976][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.592484][T16304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.618839][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.629330][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.639145][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.649563][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.659472][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.669906][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.679735][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.690232][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.700061][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.710490][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.720325][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.730975][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.740833][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.751322][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.761177][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.771628][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.783949][T16304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.793031][T16399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.805454][T16304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.814198][T16304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.822947][T16304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.831806][T16304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.842949][T16399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.857417][T16399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.867336][T16399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.934255][T16481] loop2: detected capacity change from 0 to 512 [ 253.939187][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.953159][T16481] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 17 [ 253.961392][T16399] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.970793][T16481] ext4_test_bit(bit=16, block=4) = 1 [ 253.970807][T16481] is_bad_inode(inode)=0 [ 253.970812][T16481] NEXT_ORPHAN(inode)=0 [ 253.970818][T16481] max_ino=32 [ 253.970823][T16481] i_nlink=1 [ 253.971224][T16481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.989332][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.003919][T16481] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 7: invalid block bitmap [ 254.007587][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.039529][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.058594][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.065746][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.074887][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.103052][T16399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.113525][T16399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.179688][T16399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.180233][T16500] loop2: detected capacity change from 0 to 512 [ 254.186499][ T29] audit: type=1326 audit(1717303111.851:26479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16496 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 254.229157][T16500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.241947][T16500] ext4 filesystem being mounted at /root/syzkaller-testdir3272461672/syzkaller.XjyqTZ/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.259434][T16500] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz-executor.2: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 254.260698][T16399] veth0_vlan: entered promiscuous mode [ 254.283228][T16500] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 254.293209][T16500] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz-executor.2: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 254.315382][T16399] veth1_vlan: entered promiscuous mode [ 254.321005][T16500] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 254.339057][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.340409][ T29] audit: type=1400 audit(1717303112.011:26480): avc: denied { setattr } for pid=16499 comm="syz-executor.2" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.358945][T16399] veth0_macvtap: entered promiscuous mode [ 254.382438][T16399] veth1_macvtap: entered promiscuous mode [ 254.398059][T16500] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 18: invalid block bitmap [ 254.413581][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.424067][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.433899][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.444375][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.454347][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.464841][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.474641][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.485056][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.494858][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.505278][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.515204][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.525701][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.535609][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.546101][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.555978][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.566395][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.576197][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.586696][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.597817][T16399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.613218][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.613503][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.632734][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.642675][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.653083][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.662894][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.673430][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.683292][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.693849][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.703734][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.714171][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.724060][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.734564][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.744425][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.754909][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.764797][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.775228][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.785039][T16399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.795460][T16399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.807575][T16399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.816401][T16399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.825704][T16399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.834455][T16399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.843135][T16399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.882197][T16512] bond_slave_0: entered promiscuous mode [ 254.887888][T16512] bond_slave_1: entered promiscuous mode [ 254.893687][T16512] macsec1: entered promiscuous mode [ 254.898961][T16512] bond0: entered promiscuous mode [ 254.904271][T16512] macsec1: entered allmulticast mode [ 254.909608][T16512] bond0: entered allmulticast mode [ 254.914752][T16512] bond_slave_0: entered allmulticast mode [ 254.920467][T16512] bond_slave_1: entered allmulticast mode [ 254.929943][T16512] bond0: left allmulticast mode [ 254.934951][T16512] bond_slave_0: left allmulticast mode [ 254.940504][T16512] bond_slave_1: left allmulticast mode [ 254.945998][T16512] bond0: left promiscuous mode [ 254.951009][T16512] bond_slave_0: left promiscuous mode [ 254.956460][T16512] bond_slave_1: left promiscuous mode [ 255.124769][ T29] audit: type=1326 audit(1717303112.791:26481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x7ffc0000 [ 255.148980][ T29] audit: type=1326 audit(1717303112.791:26482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x7ffc0000 [ 255.149047][ T29] audit: type=1326 audit(1717303112.791:26483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778dd30ee9 code=0x7ffc0000 [ 255.149068][ T29] audit: type=1326 audit(1717303112.791:26484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x7ffc0000 [ 255.149088][ T29] audit: type=1326 audit(1717303112.791:26485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778dd30ee9 code=0x7ffc0000 [ 255.149108][ T29] audit: type=1326 audit(1717303112.791:26486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x7ffc0000 [ 255.263211][T16547] loop0: detected capacity change from 0 to 512 [ 255.299220][T16547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.312391][T16547] ext4 filesystem being mounted at /root/syzkaller-testdir2983567796/syzkaller.EYOEMq/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.380820][T16560] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 255.414084][T16399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.481091][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.860679][T16594] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 255.868832][T16594] netlink: 15231 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.159244][T16610] loop0: detected capacity change from 0 to 512 [ 256.167816][T16610] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 256.178536][T16610] ext4_test_bit(bit=16, block=4) = 1 [ 256.183905][T16610] is_bad_inode(inode)=0 [ 256.188112][T16610] NEXT_ORPHAN(inode)=0 [ 256.192190][T16610] max_ino=32 [ 256.195409][T16610] i_nlink=1 [ 256.199149][T16610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.245513][T16610] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 256.258982][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.292102][T16399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.458659][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 256.458673][ T29] audit: type=1326 audit(1717303114.131:26523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16652 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f16819ee9 code=0x0 [ 256.504979][T16655] loop0: detected capacity change from 0 to 512 [ 256.515188][T16655] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 256.526354][T16655] ext4_test_bit(bit=16, block=4) = 1 [ 256.531654][T16655] is_bad_inode(inode)=0 [ 256.535820][T16655] NEXT_ORPHAN(inode)=0 [ 256.539863][T16655] max_ino=32 [ 256.543114][T16655] i_nlink=1 [ 256.546835][T16655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.567871][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.573254][T16655] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 256.577176][T16661] syz_tun: entered promiscuous mode [ 256.605004][T16399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.315453][ T29] audit: type=1326 audit(1717303114.991:26524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16672 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x0 [ 257.374170][T16678] loop3: detected capacity change from 0 to 512 [ 257.388967][T16678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.403386][T16678] EXT4-fs (loop3): 1 orphan inode deleted [ 257.409349][T16678] EXT4-fs (loop3): 1 truncate cleaned up [ 257.415586][T16678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.436255][T16678] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 257.446618][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.450889][T16678] EXT4-fs (loop3): Remounting filesystem read-only [ 257.463666][T16691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16691 comm=syz-executor.1 [ 257.467598][T16678] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 257.515868][T15384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.620116][ T29] audit: type=1326 audit(1717303115.291:26525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16708 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 257.724007][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.500810][ T29] audit: type=1326 audit(1717303116.171:26526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 258.750857][ T29] audit: type=1326 audit(1717303116.421:26527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x0 [ 258.855264][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.864548][T16761] syz_tun: entered promiscuous mode [ 259.625727][T16785] loop2: detected capacity change from 0 to 1024 [ 259.633118][T16785] ext4: Unknown parameter '' [ 259.711318][ T29] audit: type=1326 audit(1717303117.381:26528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f16819ee9 code=0x0 [ 259.758453][T16792] loop2: detected capacity change from 0 to 1024 [ 259.767071][T16792] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.778082][T16792] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 259.786174][T16792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 259.793502][T16792] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0 [ 259.807730][T16792] Quota error (device loop2): write_blk: dquota write failed [ 259.815147][T16792] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 259.825126][T16792] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 0 [ 259.837537][T16792] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 259.853077][T16792] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0 [ 259.867828][T14240] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 259.876839][T14240] EXT4-fs error (device loop2): ext4_release_dquot:6883: comm kworker/u8:29: Failed to release dquot type 0 [ 259.890349][T16792] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 259.899135][T16792] EXT4-fs (loop2): 1 orphan inode deleted [ 259.907097][T16792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.926454][T16792] EXT4-fs error (device loop2): ext4_lookup:1854: inode #15: comm syz-executor.2: iget: bad extra_isize 65535 (inode size 256) [ 259.990167][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.041511][T16807] vhci_hcd: invalid port number 129 [ 260.046906][T16807] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 260.073965][T16809] loop2: detected capacity change from 0 to 512 [ 260.081372][T16809] ext4: Unknown parameter 'dont_appraise' [ 260.116320][ T29] audit: type=1400 audit(1717303117.791:26529): avc: denied { map } for pid=16808 comm="syz-executor.2" path="socket:[65106]" dev="sockfs" ino=65106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 261.610105][T16924] loop3: detected capacity change from 0 to 256 [ 261.649775][T16924] FAT-fs (loop3): Directory bread(block 64) failed [ 261.656584][T16924] FAT-fs (loop3): Directory bread(block 65) failed [ 261.667790][T16924] FAT-fs (loop3): Directory bread(block 66) failed [ 261.674985][T16924] FAT-fs (loop3): Directory bread(block 67) failed [ 261.684389][T16924] FAT-fs (loop3): Directory bread(block 68) failed [ 261.697956][T16924] FAT-fs (loop3): Directory bread(block 69) failed [ 261.704643][T16924] FAT-fs (loop3): Directory bread(block 70) failed [ 261.712246][T16924] FAT-fs (loop3): Directory bread(block 71) failed [ 261.719214][T16924] FAT-fs (loop3): Directory bread(block 72) failed [ 261.727882][T16924] FAT-fs (loop3): Directory bread(block 73) failed [ 261.931939][T16964] loop3: detected capacity change from 0 to 512 [ 261.941428][T16964] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 17 [ 261.952094][T16964] ext4_test_bit(bit=16, block=4) = 1 [ 261.957489][T16964] is_bad_inode(inode)=0 [ 261.961632][T16964] NEXT_ORPHAN(inode)=0 [ 261.965768][T16964] max_ino=32 [ 261.968970][T16964] i_nlink=1 [ 261.972739][T16964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.993828][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.013186][T15384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.124815][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.270563][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.279873][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.387398][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 262.387413][ T29] audit: type=1400 audit(1717303120.061:26532): avc: denied { getopt } for pid=17010 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.546509][T17020] batadv0: left promiscuous mode [ 263.080782][T17077] loop2: detected capacity change from 0 to 1024 [ 263.097452][T17077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.117307][T17084] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 263.138312][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.351294][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.158734][T17162] lo speed is unknown, defaulting to 1000 [ 264.200356][T17172] delete_channel: no stack [ 264.824156][ T29] audit: type=1400 audit(1717303122.491:26533): avc: denied { mount } for pid=17223 comm="syz-executor.3" name="/" dev="gadgetfs" ino=66051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 264.851753][T17226] tunl0: entered promiscuous mode [ 264.859533][T17226] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 264.867722][T17226] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.932760][T17234] loop0: detected capacity change from 0 to 512 [ 264.942145][T17234] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.951212][T17234] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 264.962256][T17234] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 264.971308][T17234] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 264.981589][T17234] System zones: 0-2, 18-18, 34-34 [ 264.987187][T17234] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 265.003485][T17234] EXT4-fs (loop0): 1 truncate cleaned up [ 265.009936][T17234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.024921][T17234] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 13: comm syz-executor.0: path /root/syzkaller-testdir2983567796/syzkaller.EYOEMq/74/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 265.056382][T17239] netlink: 'syz-executor.0': attribute type 74 has an invalid length. [ 265.066906][T17234] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 265.130222][T16399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.317295][T17253] loop0: detected capacity change from 0 to 2048 [ 265.326273][T17253] ext4: Unknown parameter 'cpuacct.usage_percpu_user' [ 265.375105][T17264] loop3: detected capacity change from 0 to 512 [ 265.390215][T17264] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 17 [ 265.400877][T17264] ext4_test_bit(bit=16, block=4) = 1 [ 265.406247][T17264] is_bad_inode(inode)=0 [ 265.410404][T17264] NEXT_ORPHAN(inode)=0 [ 265.413287][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.414697][T17264] max_ino=32 [ 265.414705][T17264] i_nlink=1 [ 265.415114][T17264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.423904][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.463667][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.481965][T15384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.496318][ T29] audit: type=1326 audit(1717303123.171:26534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 265.558080][T17285] loop3: detected capacity change from 0 to 512 [ 265.571500][T17285] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 265.571531][T17285] EXT4-fs: failed to create workqueue [ 265.586489][T17285] EXT4-fs (loop3): mount failed [ 266.332531][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.341862][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.380593][T17314] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.537106][ T29] audit: type=1400 audit(1717303124.201:26535): avc: denied { bind } for pid=17329 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.619668][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.629050][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.650331][T17319] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 266.672233][T17346] loop3: detected capacity change from 0 to 512 [ 266.686559][T17346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.701237][T17346] ext4 filesystem being mounted at /root/syzkaller-testdir3102969051/syzkaller.D4bWIA/198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.726444][ T29] audit: type=1400 audit(1717303124.401:26536): avc: denied { setopt } for pid=17345 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.746897][T15384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.482072][T17366] loop2: detected capacity change from 0 to 512 [ 267.491872][T17366] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 17 [ 267.503227][T17366] ext4_test_bit(bit=16, block=4) = 1 [ 267.508676][T17366] is_bad_inode(inode)=0 [ 267.512923][T17366] NEXT_ORPHAN(inode)=0 [ 267.515472][ T29] audit: type=1400 audit(1717303125.181:26537): avc: denied { append } for pid=17361 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 267.517145][T17366] max_ino=32 [ 267.543653][T17366] i_nlink=1 [ 267.545942][ T29] audit: type=1400 audit(1717303125.211:26538): avc: denied { append } for pid=17361 comm="syz-executor.1" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.548146][T17366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.599012][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.803494][ T29] audit: type=1326 audit(1717303125.471:26539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17381 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x0 [ 267.923968][T17380] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 268.227077][ T29] audit: type=1326 audit(1717303125.901:26540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17391 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f16819ee9 code=0x0 [ 268.685850][T17399] bridge0: entered promiscuous mode [ 268.691287][T17399] macsec1: entered promiscuous mode [ 268.696710][T17399] macsec1: entered allmulticast mode [ 268.702010][T17399] bridge0: entered allmulticast mode [ 268.709385][T17399] bridge0: port 3(macsec1) entered blocking state [ 268.715851][T17399] bridge0: port 3(macsec1) entered disabled state [ 268.723437][T17399] bridge0: left allmulticast mode [ 268.728543][T17399] bridge0: left promiscuous mode [ 268.854803][T17412] loop0: detected capacity change from 0 to 164 [ 268.865736][T17412] rock: directory entry would overflow storage [ 268.871925][T17412] rock: sig=0x4f50, size=4, remaining=3 [ 268.877616][T17412] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 268.929485][T17414] syzkaller0: entered promiscuous mode [ 268.934989][T17414] syzkaller0: entered allmulticast mode [ 268.945651][T17414] syzkaller0: tun_net_xmit 1280 [ 268.950594][T17414] syzkaller0: create flow: hash 2013047528 index 1 [ 268.976150][T17413] syzkaller0: delete flow: hash 2013047528 index 1 [ 269.160012][ T29] audit: type=1326 audit(1717303126.831:26541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17427 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x0 [ 269.184288][ T29] audit: type=1326 audit(1717303126.861:26542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee9e05ee9 code=0x0 [ 269.263039][T17433] __nla_validate_parse: 4 callbacks suppressed [ 269.263049][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.309378][T17437] bridge0: entered promiscuous mode [ 269.315975][T17437] macsec1: entered promiscuous mode [ 269.321323][T17437] macsec1: entered allmulticast mode [ 269.326647][T17437] bridge0: entered allmulticast mode [ 269.333652][T17437] bridge0: port 3(macsec1) entered blocking state [ 269.340203][T17437] bridge0: port 3(macsec1) entered disabled state [ 269.347828][T17437] bridge0: left allmulticast mode [ 269.352898][T17437] bridge0: left promiscuous mode [ 269.432741][T17439] bridge0: entered promiscuous mode [ 269.438615][T17439] macsec1: entered promiscuous mode [ 269.443912][T17439] macsec1: entered allmulticast mode [ 269.449291][T17439] bridge0: entered allmulticast mode [ 269.456333][T17439] bridge0: port 3(macsec1) entered blocking state [ 269.462783][T17439] bridge0: port 3(macsec1) entered disabled state [ 269.471070][T17439] bridge0: left allmulticast mode [ 269.476180][T17439] bridge0: left promiscuous mode [ 269.885249][ T29] audit: type=1326 audit(1717303127.561:26543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feba844aee9 code=0x0 [ 270.030445][T17461] loop2: detected capacity change from 0 to 1024 [ 270.037805][T17461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.044870][T17461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.053459][T17461] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.064905][T17461] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 270.084031][T17461] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 270.096999][T17461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.116118][T17461] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 270.124287][T17461] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 270.132418][T17461] netlink: 33998 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.254537][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.746766][ T29] audit: type=1326 audit(1717303128.421:26544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17491 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feba844aee9 code=0x0 [ 270.850326][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.901384][T17498] loop3: detected capacity change from 0 to 8192 [ 270.929616][T17500] cgroup: No subsys list or none specified [ 271.329973][ T29] audit: type=1326 audit(1717303129.001:26545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17518 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778dd30ee9 code=0x0 [ 271.628530][ T29] audit: type=1326 audit(1717303129.301:26546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17530 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba844aee9 code=0x7ffc0000 [ 271.881926][T17553] xt_TCPMSS: Only works on TCP SYN packets [ 272.290448][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.433108][T17569] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 272.796090][T17574] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 272.865729][T17586] loop3: detected capacity change from 0 to 736 [ 272.880346][T17586] rock: directory entry would overflow storage [ 272.886555][T17586] rock: sig=0x3b10, size=4, remaining=3 [ 273.470549][T17626] bridge0: entered promiscuous mode [ 273.475843][T17626] macsec1: entered promiscuous mode [ 273.481095][T17626] macsec1: entered allmulticast mode [ 273.486398][T17626] bridge0: entered allmulticast mode [ 273.493170][T17626] bridge0: port 3(macsec1) entered blocking state [ 273.499824][T17626] bridge0: port 3(macsec1) entered disabled state [ 273.508293][T17626] bridge0: left allmulticast mode [ 273.513415][T17626] bridge0: left promiscuous mode [ 273.738455][T17655] loop0: detected capacity change from 0 to 512 [ 273.745972][T17655] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.753996][T17655] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.0: invalid block [ 273.766629][T17655] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 4294967295 (level 1) [ 273.781259][T17655] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 4294967295 (level 1) [ 273.796200][T17655] EXT4-fs (loop0): 2 truncates cleaned up [ 273.802470][T17655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.870810][T17663] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.970503][T17671] bridge0: entered promiscuous mode [ 273.976579][T17671] macsec1: entered promiscuous mode [ 273.981878][T17671] macsec1: entered allmulticast mode [ 273.987196][T17671] bridge0: entered allmulticast mode [ 274.004096][T17671] bridge0: port 3(macsec1) entered blocking state [ 274.010618][T17671] bridge0: port 3(macsec1) entered disabled state [ 274.029917][T17671] bridge0: left allmulticast mode [ 274.035160][T17671] bridge0: left promiscuous mode [ 274.327316][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 274.327328][ T29] audit: type=1400 audit(1717303132.001:26550): avc: denied { create } for pid=17679 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 274.355719][ T29] audit: type=1400 audit(1717303132.031:26551): avc: denied { bind } for pid=17679 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 274.376131][ T29] audit: type=1400 audit(1717303132.031:26552): avc: denied { name_bind } for pid=17679 comm="syz-executor.1" src=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 274.399192][ T29] audit: type=1400 audit(1717303132.031:26553): avc: denied { node_bind } for pid=17679 comm="syz-executor.1" saddr=172.20.20.170 src=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 274.439377][ T29] audit: type=1400 audit(1717303132.111:26554): avc: denied { read write } for pid=16304 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.463194][ T29] audit: type=1400 audit(1717303132.111:26555): avc: denied { open } for pid=16304 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.489562][ T29] audit: type=1400 audit(1717303132.161:26556): avc: denied { ioctl } for pid=16304 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=870 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.519356][ T29] audit: type=1400 audit(1717303132.191:26557): avc: denied { create } for pid=17679 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 274.544035][ T29] audit: type=1400 audit(1717303132.211:26558): avc: denied { write } for pid=17679 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 274.565233][ T29] audit: type=1400 audit(1717303132.211:26559): avc: denied { connect } for pid=17679 comm="syz-executor.1" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 274.606900][T17690] 9pnet_fd: p9_fd_create_tcp (17690): problem connecting socket to 127.0.0.1 [ 274.654129][T16399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.875989][T17708] loop0: detected capacity change from 0 to 164 [ 275.175942][T17708] bond_slave_0: entered promiscuous mode [ 275.181628][T17708] bond_slave_1: entered promiscuous mode [ 275.195851][T17709] bond_slave_0: left promiscuous mode [ 275.201267][T17709] bond_slave_1: left promiscuous mode [ 275.219752][T17709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.243099][T17709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.254015][T17709] bond0 (unregistering): Released all slaves [ 275.266999][T17717] bridge0: entered promiscuous mode [ 275.272352][T17717] macsec1: entered promiscuous mode [ 275.277760][T17717] macsec1: entered allmulticast mode [ 275.283030][T17717] bridge0: entered allmulticast mode [ 275.291271][T17717] bridge0: port 3(macsec1) entered blocking state [ 275.297826][T17717] bridge0: port 3(macsec1) entered disabled state [ 275.311706][T17717] bridge0: left allmulticast mode [ 275.316930][T17717] bridge0: left promiscuous mode [ 275.317254][T17715] ebt_among: dst integrity fail: 10c [ 275.324620][T17718] ebt_among: dst integrity fail: 10c [ 275.357831][T17720] bridge0: entered promiscuous mode [ 275.363399][T17720] macsec1: entered promiscuous mode [ 275.368729][T17720] macsec1: entered allmulticast mode [ 275.374010][T17720] bridge0: entered allmulticast mode [ 275.381086][T17720] bridge0: port 3(macsec1) entered blocking state [ 275.387663][T17720] bridge0: port 3(macsec1) entered disabled state [ 275.406004][T17720] bridge0: left allmulticast mode [ 275.411394][T17720] bridge0: left promiscuous mode [ 275.654385][T17730] loop0: detected capacity change from 0 to 1764 [ 275.798365][T17738] loop0: detected capacity change from 0 to 8192 [ 275.808732][T17738] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.259647][T17750] bridge0: entered promiscuous mode [ 276.265070][T17750] macsec1: entered promiscuous mode [ 276.270403][T17750] macsec1: entered allmulticast mode [ 276.275739][T17750] bridge0: entered allmulticast mode [ 276.282595][T17750] bridge0: port 3(macsec1) entered blocking state [ 276.289148][T17750] bridge0: port 3(macsec1) entered disabled state [ 276.297199][T17750] bridge0: left allmulticast mode [ 276.302407][T17750] bridge0: left promiscuous mode [ 276.348169][T17754] lo speed is unknown, defaulting to 1000 [ 276.472949][T17764] loop2: detected capacity change from 0 to 1764 [ 276.783249][T17785] bridge0: entered promiscuous mode [ 276.793196][T17785] macsec1: entered promiscuous mode [ 276.798528][T17785] macsec1: entered allmulticast mode [ 276.803861][T17785] bridge0: entered allmulticast mode [ 276.824045][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.836966][T17785] bridge0: port 3(macsec1) entered blocking state [ 276.843442][T17785] bridge0: port 3(macsec1) entered disabled state [ 276.851861][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.861311][T17787] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.892549][T17785] bridge0: left allmulticast mode [ 276.897738][T17785] bridge0: left promiscuous mode [ 277.201074][T17803] loop0: detected capacity change from 0 to 8192 [ 277.209163][T17803] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.513782][T13303] syz_tun (unregistering): left allmulticast mode [ 277.520337][T13303] bridge0: port 1(syz_tun) entered disabled state [ 277.769774][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.840658][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.898780][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.941657][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.968930][T17842] lo speed is unknown, defaulting to 1000 [ 278.052663][ T11] erspan0 (unregistering): left promiscuous mode [ 278.061838][ T11] gretap0 (unregistering): left promiscuous mode [ 278.127470][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.138022][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.147895][ T11] bond0 (unregistering): Released all slaves [ 278.209743][T17842] chnl_net:caif_netlink_parms(): no params data found [ 278.258517][ T11] hsr_slave_0: left promiscuous mode [ 278.264236][ T11] hsr_slave_1: left promiscuous mode [ 278.272474][ T11] veth1_macvtap: left promiscuous mode [ 278.277994][ T11] veth0_macvtap: left promiscuous mode [ 278.283491][ T11] veth1_vlan: left promiscuous mode [ 278.288772][ T11] veth0_vlan: left allmulticast mode [ 278.294055][ T11] veth0_vlan: left promiscuous mode [ 278.357236][ T11] pim6reg (unregistering): left allmulticast mode [ 278.400710][ T11] team0 (unregistering): Port device team_slave_1 removed [ 278.410896][ T11] team0 (unregistering): Port device team_slave_0 removed [ 278.458497][T17842] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.465720][T17842] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.473623][T17842] bridge_slave_0: entered allmulticast mode [ 278.481245][T17842] bridge_slave_0: entered promiscuous mode [ 278.488098][T17842] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.488149][T17875] loop0: detected capacity change from 0 to 164 [ 278.495178][T17842] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.495357][T17842] bridge_slave_1: entered allmulticast mode [ 278.515813][T17842] bridge_slave_1: entered promiscuous mode [ 278.537134][T17842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.548472][T17842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.586763][T17842] team0: Port device team_slave_0 added [ 278.594063][T17842] team0: Port device team_slave_1 added [ 278.611722][T17842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.618984][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.644920][T17842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.656679][T17842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.663619][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.689573][T17842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.741790][T17842] hsr_slave_0: entered promiscuous mode [ 278.752744][T17842] hsr_slave_1: entered promiscuous mode [ 278.762769][T17842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.770856][T17842] Cannot create hsr debugfs directory [ 278.869750][T17897] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.923283][T17902] loop0: detected capacity change from 0 to 2048 [ 279.019286][T17907] loop2: detected capacity change from 0 to 512 [ 279.026609][T17907] journal_path: Lookup failure for './bus' [ 279.032449][T17907] EXT4-fs: error: could not find journal device path [ 279.068367][T17842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.077488][T17842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.086427][T17842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.098108][T17842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.115761][T17911] loop2: detected capacity change from 0 to 164 [ 279.139008][T17842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.153009][T17842] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.163263][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.170397][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.179002][T17911] bond_slave_0: entered promiscuous mode [ 279.184658][T17911] bond_slave_1: entered promiscuous mode [ 279.194155][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.201236][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.209417][T17911] bond_slave_0: left promiscuous mode [ 279.214950][T17911] bond_slave_1: left promiscuous mode [ 279.226716][T17911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.238538][T17911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.250222][T17911] bond0 (unregistering): Released all slaves [ 279.278622][T17842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.327832][T17917] loop2: detected capacity change from 0 to 512 [ 279.338101][T17917] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 17 [ 279.338391][T17842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.349842][T17917] ext4_test_bit(bit=16, block=4) = 1 [ 279.360698][T17917] is_bad_inode(inode)=0 [ 279.364894][T17917] NEXT_ORPHAN(inode)=0 [ 279.368998][T17917] max_ino=32 [ 279.372194][T17917] i_nlink=1 [ 279.376221][T17917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.391867][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.411422][T16304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.485904][T17842] veth0_vlan: entered promiscuous mode [ 279.496586][T17842] veth1_vlan: entered promiscuous mode [ 279.518859][T17935] ================================================================== [ 279.520978][T17842] veth0_macvtap: entered promiscuous mode [ 279.526952][T17935] BUG: KCSAN: data-race in io_req_defer_failed / io_wq_free_work [ 279.526981][T17935] [ 279.526990][T17935] write to 0xffff888110a23f48 of 8 bytes by task 17933 on cpu 0: [ 279.527004][T17935] io_req_defer_failed+0x6e/0x280 [ 279.527022][T17935] io_req_task_cancel+0x21/0x30 [ 279.527039][T17935] io_handle_tw_list+0x1b9/0x200 [ 279.534843][T17842] veth1_macvtap: entered promiscuous mode [ 279.540426][T17935] tctx_task_work_run+0x6c/0x1b0 [ 279.549583][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.550438][T17935] tctx_task_work+0x40/0x80 [ 279.555470][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.560281][T17935] task_work_run+0x13a/0x1a0 [ 279.565299][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.570892][T17935] get_signal+0xeee/0x1080 [ 279.575813][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.586180][T17935] arch_do_signal_or_restart+0x95/0x4b0 [ 279.586201][T17935] syscall_exit_to_user_mode+0x59/0x130 [ 279.590872][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.600446][T17935] do_syscall_64+0xd6/0x1c0 [ 279.605043][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.615421][T17935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.615450][T17935] [ 279.615455][T17935] read to 0xffff888110a23f48 of 8 bytes by task 17935 on cpu 1: [ 279.615469][T17935] io_wq_free_work+0x24/0x1b0 [ 279.615490][T17935] io_worker_handle_work+0x49f/0x9a0 [ 279.615507][T17935] io_wq_worker+0x286/0x820 [ 279.615522][T17935] ret_from_fork+0x4b/0x60 [ 279.615540][T17935] ret_from_fork_asm+0x1a/0x30 [ 279.615560][T17935] [ 279.615563][T17935] value changed: 0x00000000000c0058 -> 0x00000000004c0118 [ 279.615573][T17935] [ 279.615576][T17935] Reported by Kernel Concurrency Sanitizer on: [ 279.615591][T17935] CPU: 1 PID: 17935 Comm: iou-wrk-17933 Not tainted 6.10.0-rc1-syzkaller-00296-g89be4025b0db #0 [ 279.619999][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.629745][T17935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 279.629758][T17935] ================================================================== [ 279.762490][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.772416][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.782954][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.792795][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.803270][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.813159][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.823700][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 2024/06/02 04:38:57 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 279.833535][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.834373][ T29] kauditd_printk_skb: 3414 callbacks suppressed [ 279.834385][ T29] audit: type=1400 audit(1717303137.481:29974): avc: denied { write } for pid=3076 comm="syz-fuzzer" path="pipe:[1689]" dev="pipefs" ino=1689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 279.843946][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.883222][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.893693][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.903533][T17842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.914030][T17842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!