last executing test programs: 5.301501934s ago: executing program 4 (id=1614): syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 4.319232776s ago: executing program 4 (id=1628): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0x8000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a0f, 0x1718) 4.302551468s ago: executing program 4 (id=1629): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc7204000000000000003b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52416a662d8bc9c89c9120072a5d00dcdd85b4975e2a2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b23afefdb63aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e4f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecc02dd027cb995f1eb4e98e4b500b5843d4ee1d28831707923f00000000000000000000000000045ac1fd93fe7ebb00d97008a55b60f1fa4eb291f2cf50224876b476b94660ed5645e4c7b6ab6d5604fe54a2e65ea5b6b844dd87d264433ccfa0c33b213920978219df125eae0f87082cdc32f9e6265bce02f3d9975f6863b38ecd0f4811a367eab021a5864cf3fde99aa69da4dcbf96be922bd0d50810405b9a31e93c301c4c0d5d34ae48dff8bceb4a9e26ca1db11e2c28d1ed1f63828eb8d70a125773b20a33695dc46eceef6b13ad75164ab5b8eaf32cc6b5e8fe283475a22864b8df30dc6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.953130266s ago: executing program 3 (id=1664): perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0) 2.934138889s ago: executing program 3 (id=1665): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0xc89f, 0x700}, 0x1700) 2.07604401s ago: executing program 3 (id=1676): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4a4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2a1, &(0x7f0000000800)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x20}, {0x6, 0x9, 0x0, 0x1}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x7ff, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x204, @local}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1100005}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0xee01, 0xee00, 0x0) setpriority(0x2, 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400), 0x0, &(0x7f0000000240)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c69417040a29d43fcd4ecdc2141000001800010a000000000000000004000000"], 0x14}, 0x1, 0xb3100000}, 0x0) r6 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.051229834s ago: executing program 0 (id=1677): r0 = socket(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x1, 0x4, &(0x7f0000002840)=""/186, &(0x7f0000000200)=0xba) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000980)="f3", 0x1}], 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfdef) write(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)={0x14, r3, 0x605, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000f80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000e80)=ANY=[@ANYBLOB="01000067", @ANYRES16=r3, @ANYBLOB="10002cbd7000fcdbdf253f00000044005e8008000900070000000800070035020000080005003d0000000800020006000000080007001d03000008000900010000000800030007000000080005005b00000014005e8008000300ff7f000008000700750300000c005e80080005003800000004005e802c005e80280001001d8a0000feffffff050000000500000005000000adfffffff30000000020000040ed0000"], 0xa8}, 0x1, 0x0, 0x0, 0x851}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x81188f0, r1, 0x59b64000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000001100"], &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)) unshare(0x40000000) 1.894733338s ago: executing program 0 (id=1680): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0xc89f, 0x700}, 0x1700) 1.877206121s ago: executing program 0 (id=1681): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xe12b}, {}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000000000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x33, 0x0, 0x1}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0xf, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x2}]) r2 = memfd_create(&(0x7f0000000440)='\x107m\xadJ\xdc:F\xa0\x06\xe6\xbb\xb8\xb0\xe8\xc3\x87\x12+\x8fY\xee\xc7\xd0,\xc6\x01*\x88\x14U\xde\xfa:\xee\xe8\x1d\x91F\x86)', 0x0) finit_module(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000016c0), 0x3af4701e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000002380)={0x84, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_USE_RRM={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac12, 0x0, 0xfac0a, 0xfac14, 0xfac07]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac00, 0xfac08]}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10, {0x0, 0x6, 0x3, 0xa2}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4008051) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.383957657s ago: executing program 1 (id=1688): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x183}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304", 0xdf}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 1.383285057s ago: executing program 1 (id=1689): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x36, 0x0, 0x0) 1.373195919s ago: executing program 1 (id=1690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) (async) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)='f', 0x1, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000140)='f', 0x1, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @private1}, 0x1c) ioperm(0x0, 0x9, 0x5) prctl$PR_SET_VMA(0x41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) shutdown(r1, 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in=@loopback}}, 0xe8) listen(r0, 0x0) syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0}, &(0x7f0000000100), &(0x7f0000000140)) (async) r5 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0}, &(0x7f0000000100), &(0x7f0000000140)) r6 = epoll_create(0xaf2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) epoll_pwait2(r6, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) (async) epoll_pwait2(r6, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)) getsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) 1.330822095s ago: executing program 2 (id=1692): msgsnd(0x0, &(0x7f0000000300)={0xd}, 0x8, 0x60d02051c415dc94) 1.318728457s ago: executing program 2 (id=1693): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="a3", 0x1}], 0x1, 0x8000, 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x13b) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000001840)=""/4083, 0x4d}], 0x1) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2c}, {0x6}]}, 0x10) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) keyctl$read(0xb, r7, &(0x7f0000000300)=""/51, 0x1001) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@map, 0xffffffffffffffff, 0x36, 0x1002, 0xffffffffffffffff, @prog_id}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0406618, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x0, 0x6}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) msgsnd(0x0, &(0x7f0000000000)={0x1, "49abece64e4134193d11a9299e31f190504c201d4fcc2d9940901995adcdf2a9b1de8a0c124b5ea7037ea94198c1377746e0d9d52c99b5b4ae8752eb2c88c0c021e1f82ea92604d1f56878f3272e0f5a4308d8e7acef40be737516db3ab13456bbabf363896089f79162728e8d9c810e3a482600386f308f6abb0f79426a7486f1c6ee5e2da7b545fe5e128351b3a500392f6e56edb0108974e8d554c2436c9b2a9f28561637f319d05ed31e2825bb92faa602b5e80be33fb260ad100c9d332829e6de6d14102ccba4fbcc60dcedf1b9de1426d4af93cd31dcb50c0bba492a8cdb1b25d0d3d9adb3eff02f99707210e3cf6dae01e80cfeea9d645964fee137b5bdf72bf492132ec93a3d4b3337bb50c3acdeae207cafb812fe86a77281f91051ffdf04679e65d99be83962d32210651fcaf5935bea3e4d29a767da3ff457e433417bf8c00139840aa913b51855c581f39b5f"}, 0x15a, 0x60d02051c415dc94) 1.250598608s ago: executing program 1 (id=1694): socket$tipc(0x1e, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x2, @val=@tracing}, 0x40) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"5800010000080200", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) syz_io_uring_setup(0x1d11, &(0x7f0000000280)={0x0, 0x8ada, 0x200, 0x1, 0x16a}, &(0x7f0000000200), &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 1.244548778s ago: executing program 1 (id=1695): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 1.222729461s ago: executing program 1 (id=1696): syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 1.218055592s ago: executing program 3 (id=1697): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf64(r2, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0xca, 0x3, 0x71, 0x3b, 0x0, 0x2, 0x6, 0x20, 0xbb, 0x40, 0x3d8, 0x6, 0xfc, 0x38, 0x2, 0x0, 0x9ee}, [{0x6, 0xe, 0x4, 0x0, 0x1, 0x73b6f9ac, 0x27ae4c2e, 0x3}, {0x3, 0x0, 0x8000, 0x4, 0xfffffffffffffffa, 0xbf7, 0xff, 0x40}], "dd48ecda991b0641afeda520a1a70e17a578ce939c33366d88378e6dc42f1f6f8d8614b885751d14698d109a5e7a0c18e5f94e6ca8aa530f5d081ffff494054c1878bf57bf045555c81bcf043e62aba3b476fd5d5c9e5e0bdd0c55f453a5f6dcee5fd2e3d3173c11219046f5415d43d61b16cd96aee012e57a1268f33dae1e66e19c39bd4e5f7e80c17452841af6d5652f5f3661930257d4ffa0977cb5cda3034ee02a0c26524db2f99423c90c3d3795", ['\x00']}, 0x260) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.151804062s ago: executing program 2 (id=1698): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000680)={0x2, @short}, 0x14) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x6, 0x0, 0x6}, @alu={0x7, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='rss_stat\x00', r5}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 1.130121006s ago: executing program 3 (id=1699): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000020000"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x33, 0x0, 0x1}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0xf, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x2}]) r2 = memfd_create(&(0x7f0000000440)='\x107m\xadJ\xdc:F\xa0\x06\xe6\xbb\xb8\xb0\xe8\xc3\x87\x12+\x8fY\xee\xc7\xd0,\xc6\x01*\x88\x14U\xde\xfa:\xee\xe8\x1d\x91F\x86)', 0x0) finit_module(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000016c0), 0x3af4701e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000002380)={0x884, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x804, 0xfc, "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"}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_USE_RRM={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac12, 0x0, 0xfac0a, 0xfac14, 0xfac07]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac00, 0xfac08]}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10, {0x0, 0x6, 0x3, 0xa2}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x884}, 0x1, 0x0, 0x0, 0x41}, 0x4008051) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.117708178s ago: executing program 2 (id=1700): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x183}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304", 0xdf}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 1.094731802s ago: executing program 2 (id=1701): r0 = syz_open_pts(0xffffffffffffffff, 0x40080) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0xfffffffffffffddd, 0x0, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) r3 = syz_clone(0x10000, &(0x7f0000000880)="163771b34b1e2aba3579d852d015eafa029cac4c62b7d3fa795f4fd22e57370133330b6ac1bd1250ea7ed88fb3d6dead60d43b453238b29c183106f05d2111fb70e0888b26e519a28f13a95a18b0dca8e0fa69fb19cccd2e9c25664a6912665e2a875229b4637a46549cd72bf927b811bbdc62be24848c0ce3f5959082d4b1c5dd2c3cab64aa2c07a1f3ddc69a96cdd737839ee56e42dda455580de0417d9431edd516bdae839778b14bab360fe0aac4d51363815703bc8a0d4910c2b491de1a6fec1f4abac52039", 0xc8, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="964191e821393b50f32826f68fc733391360b80f90e17a86f2ed7432aae3c564d1196e28352d509cb5175b883e5651e8cb1ba5") r4 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000a40)={r4, r0, 0x7}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000a80)={{0x2, 0x4e21, @loopback}, {0x306}, 0x60, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 'netpci0\x00'}) r6 = syz_io_uring_setup(0x5943, &(0x7f0000000b00)={0x0, 0xd705, 0x200, 0x0, 0x2d4}, &(0x7f0000000b80), &(0x7f0000000bc0)) io_uring_enter(r6, 0x606a, 0x49b9, 0x2, &(0x7f0000000c00)={[0xffffffffffffff64]}, 0x8) io_setup(0xfffffff8, &(0x7f0000000c40)=0x0) io_cancel(r7, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x7, r4, &(0x7f0000000c80)="329dd611dec91b74e35f589be26484f3eb8a525aad7c14eb9160258747661de1f8966c5855496292866b9bc8841521c1974bfee397771ef9", 0x38, 0x1, 0x0, 0x1}, &(0x7f0000000d00)) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000d40), 0x4) r9 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r9, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/13, 0xd}, {&(0x7f0000000f80)=""/77, 0x4d}, {&(0x7f0000001000)=""/8, 0x8}, {&(0x7f0000001040)=""/45, 0x2d}, {&(0x7f0000001080)=""/177, 0xb1}], 0x7, &(0x7f00000011c0)=""/77, 0x4d}, 0x9}, {{&(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001800)=[{&(0x7f00000012c0)=""/39, 0x27}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/97, 0x61}, {&(0x7f0000001440)=""/83, 0x53}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/107, 0x6b}, {&(0x7f0000001640)=""/102, 0x66}, {&(0x7f00000016c0)=""/147, 0x93}, {&(0x7f0000001780)=""/84, 0x54}], 0x9, &(0x7f00000018c0)=""/105, 0x69}, 0x9}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/210, 0xd2}, {&(0x7f0000001a40)=""/183, 0xb7}], 0x2, &(0x7f0000001b40)=""/190, 0xbe}, 0x8}, {{&(0x7f0000001c00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/244, 0xf4}], 0x1}, 0x4}, {{&(0x7f0000001dc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/50, 0x32}, {&(0x7f0000001e80)=""/92, 0x5c}, {&(0x7f0000001f00)=""/66, 0x42}], 0x3, &(0x7f0000001fc0)=""/204, 0xcc}, 0x2}, {{&(0x7f00000020c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002140)=""/218, 0xda}, {&(0x7f0000002240)=""/228, 0xe4}, {&(0x7f0000002340)=""/188, 0xbc}, {&(0x7f0000002400)=""/144, 0x90}], 0x4, &(0x7f0000002500)=""/96, 0x60}, 0x9}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002600)=""/58, 0x3a}, {&(0x7f0000002640)=""/169, 0xa9}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/246, 0xf6}], 0x4, &(0x7f0000002880)=""/170, 0xaa}, 0x7}, {{&(0x7f0000002940)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000029c0)=""/76, 0x4c}], 0x1, &(0x7f0000002a80)=""/166, 0xa6}, 0x7}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002b40)}, {0xffffffffffffffff}, {&(0x7f0000002b80)=""/221, 0xdd}, {&(0x7f0000002c80)=""/111, 0x6f}, {&(0x7f0000002d00)=""/151, 0x97}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/178, 0xb2}], 0x7, &(0x7f0000003000)=""/65, 0x41}, 0x400}, {{&(0x7f0000003080)=@caif=@util, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003100)=""/202, 0xca}, {&(0x7f0000003200)=""/152, 0x98}], 0x2, &(0x7f0000003300)=""/2, 0x2}}], 0xa, 0x23, &(0x7f00000035c0)={0x0, 0x989680}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003600), 0x280) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000003640)={0x40, @tick, 0x8, {0x0, 0x1}, 0xf9, 0x1, 0x9}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x34, 0x3, 0x6, 0x402, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x10000000) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000003780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg(0xffffffffffffffff, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f00000039c0)="40d29b5df4dbdba6ba40530e923381356f101f3d1e050dbe67868cc7bbc6e51e6712aff28790d878055c11b23399744b239efdf576e69b0358134cf85972f05d2b843224bd25ffe0b078f83641fa1e756f1cd0682522a3ae4b59e0bfa016977d57da52d2ae48eed9f875e8c7d31727b4467cef139b16f502d4bcbf87291d038a3f87eaa40b3a16af93f4d8256abe874bb6bdea2f8dcfd206750d59c3c6e5e663b053ea6f1740407ce399167c3c059975cde94c3278f6f4b48ac546a0fa99f66fd49d6269895d731294e24a68ffaaffb15220553893e4f6325a3705b5a86b31729094c4d62432f824da0c0eac08425e6b8043b0f81f9336f6", 0xf8}, {&(0x7f0000003ac0)="95928cea44f931f3abc8a131376a929ce0358235c24efd116feea8b35506a38c6ef289b4d2dbd1a761207d40fcb711a40bfdf70adb081c6d59d49f1f3da113b46d3032e24f6301eaa28a858ce70c5627630ca6228ac6eba2fd219bc4cb505fb290d512e53ba922e97cc867753fa9b2ef1f5d585fc834b3f58a55deebb8643f0eb9b709190419f1f4f21626510fa7a5eacb99e3a8a39c9afeb268645d8e4b7b57104da10a9ea4f8b41af0514476231de8139ebf8c894365a3a9018f284ae357eb412313e0f4b2c5c444b44ca58d1da905747589", 0xd3}, {&(0x7f0000003bc0)="fb5ac6581a63eb5aac151da20480b433c880ad15e8e86710d09b6f50578a75942528a64046b96999e29fabbb1ce8cb634e9fc04461b25785920f62f8884033a2017be80a5a15e1283288320714e3ab604e1b4fa7c3d74cc021eeb39711e6d8c54b0259d96e9131cb75a6aa657323918bceb8783344c3385023f574b1806cd9b1d359174530585079125954b3469e625c624996d8fd427f0ba46e45c35647554bc95f0782d625ddc6357aabe54277c6dbe3a57c1b2d56f11575f141522b543da216e76bd9b22aaa23f49d443d8940d427cfbebbd767450e0743b2990b6b", 0xdd}, {&(0x7f0000003cc0)="7461da3c93008fcf03dc8829363ce464953851f1ef6921c0cb1ebf584bc72771a2d95f5aaa4e7a4adc312f92781350a0c89f66006fcaf6df32d27fdb2a5037721df80d7ce7ef5d756994615437bb3bc87f943fe680c29d02b05edcb15591b5b4af8017b638153c1dcb3209fceff814d1056b04467d6caac3729b88dd07c636ccb686af339df53184c5d7961ec883776c8a22278cd1936b3dd922afecc3dfa4d53cc7d80c693a1c9324b887019cc4660ba57e21b87768c3e215f38f", 0xbb}, {&(0x7f0000003d80)="ec606ed1373e8c52", 0x8}, {&(0x7f0000003dc0)="1360ce77282326f32a7f85c2d2ddee6a4078a3ef1e7fe3483c7a1b3b6af805c9e22274357bb73f8db972f0659a37004a58aaea601307bfc9cce0579b32956dbad387abf1a6c09ba5f12a41b1d3a942be2339e089fe709759208d2fdda8cd60ce84d5c8724fe1196594f086abb9f61f34a8ca123b1cafea9f7a08ca5efe157137431f21e5c9f42f2638e85ec15d127b5d7d3321e1c0fea06c", 0x98}], 0x6, &(0x7f0000003f00)=[{0x1010, 0x10e, 0x2400, "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"}], 0x1010}, 0x48895) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000004f80)=0x0) syz_open_procfs(r11, &(0x7f0000004fc0)='cmdline\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000005000), 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000005040)=r3) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000005080)=0xffffffffffffffff, 0x0, 0x4) r12 = request_key(&(0x7f00000050c0)='id_legacy\x00', &(0x7f0000005100)={'syz', 0x3}, &(0x7f0000005140)='[]\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r12, 0x1000000) 1.012265694s ago: executing program 0 (id=1702): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020490c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000460000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r1}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x0, 0x1) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) (async, rerun: 32) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (rerun: 32) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xc8, 0xa9}}, './file0\x00'}) (async) sendto$inet6(r7, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32) recvfrom$inet6(r7, &(0x7f0000001300)=""/29, 0x1d, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) (rerun: 32) 910.08665ms ago: executing program 0 (id=1703): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x183}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0f", 0xe1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 909.08277ms ago: executing program 0 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001d00010000000000000000000a000000", @ANYRES32=0x0, @ANYRES64=r0], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x800091, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0xfffffffd}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000350001000900000000000000040000000492d800050009"], 0x20}}, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x53, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="3b92b5f352b2115aa53fc11243b7a2756b9b58732a19bc18ec3da751500bdcefa659a06265111581334523f9331b6ad50a25d4e3dab397d5d77397c8ddc846a3af6988dfa6a4b4720a274843902a4c63782d372aa805226936e9e200df65431cb15b8eabad4b97d9d57b6251dc2813de58468b41201a049fad379061eecd330aca795cd32a474347318d5030c086457d165f56628cd72655450533f0b34b75992a214555c9a95532d97fd324302b8d28e741c845c117c50b97028ffc5a98eafa3c5d828c83b2ed8b819bd247370fcc701c94f9e8fa890a249bba6f653d9b9630f9bbd458efeac843"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) 575.599111ms ago: executing program 4 (id=1705): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000001640)={0xa, 0x4e20, 0x500, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 565.412983ms ago: executing program 4 (id=1706): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42802, 0x1) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42802, 0x1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x83d491, 0x0) (async) mount$bind(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x83d491, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffff9, 0x100001, 0xbaae, 0x421c, r2, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000540)={r4, &(0x7f0000000740)="06c1473d39ed8499b89244d2036c1c9c50b6dbd6e509ab0d7d0044fd34d0cfa9afb3fa9755148271f468b6bc9f0300000000000000274d0f226c195ba16e1cb4473068f998b85e6e2e0cc0c29990e07483f6d43953f303a3bb5684b0bfdd5076d6c97e52c570cf443271bb6e51bafe4ff115b16f34998146e9134dfc9e06469a0a3012a6435e8794301286438fbefbe4bd0e1718c5350d7431b877069cabcfdf69d916ef785087eebc46adb8f39e23c8c89dc42c07d9808bada38f616af1d50f6b28a05698c29644ed63acc13ad149fa2cbed891c5d6a3a96fc7a6a1f497cb0d70e18d87080c85", &(0x7f0000001580)=""/92}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x14, 0x88, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000140)='./file0/file0\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/115, 0x73, 0x2100, 0x0, 0x0) 477.321166ms ago: executing program 4 (id=1707): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000800), 0x9, 0x60c, &(0x7f00000001c0)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x5802, 0x294, 0x110, 0x294, 0x228, 0x325, 0x378, 0x228, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x238, 0x2a0, 0x52020000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20fb0e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x882ec6987e304a63) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 219.257466ms ago: executing program 3 (id=1708): open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xb0\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec', 0xb) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$addseals(r3, 0x409, 0xe) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x853318e48f6df967, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, &(0x7f0000000140)=""/250}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xa, 0x1005, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r5, &(0x7f00000006c0), 0x0}, 0x20) ftruncate(r2, 0x8800000) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x7ffff8, 0x0) fallocate(r1, 0x22, 0x401, 0x0) ioctl(r1, 0x1, &(0x7f00000004c0)="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") write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[], 0xfd14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000020000000080a01040000000000000000000000000900010073797a30000000001400000011000100"/101], 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendfile(r0, r0, 0x0, 0x100000000) pipe2(&(0x7f0000000200), 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 0s ago: executing program 2 (id=1709): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="a3", 0x1}], 0x1, 0x8000, 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x13b) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000001840)=""/4083, 0x4d}], 0x1) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2c}, {0x6}]}, 0x10) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) keyctl$read(0xb, r7, &(0x7f0000000300)=""/51, 0x1001) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@map, 0xffffffffffffffff, 0x36, 0x1002, 0xffffffffffffffff, @prog_id}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0406618, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x0, 0x6}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) msgsnd(0x0, &(0x7f0000000000)={0x1, "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"}, 0x15a, 0x60d02051c415dc94) kernel console output (not intermixed with test programs): msg+0x140/0x180 [ 103.311676][ T6902] ____sys_sendmsg+0x312/0x410 [ 103.316447][ T6902] __sys_sendmsg+0x1e9/0x280 [ 103.321116][ T6902] ? futex_wait+0x18e/0x1c0 [ 103.325624][ T6902] __x64_sys_sendmsg+0x46/0x50 [ 103.330380][ T6902] x64_sys_call+0xb25/0x2d70 [ 103.334964][ T6902] do_syscall_64+0xc9/0x1c0 [ 103.339458][ T6902] ? clear_bhb_loop+0x55/0xb0 [ 103.344125][ T6902] ? clear_bhb_loop+0x55/0xb0 [ 103.348789][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.354680][ T6902] RIP: 0033:0x7fd113c41b29 [ 103.359084][ T6902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.378678][ T6902] RSP: 002b:00007fd112ec3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.387074][ T6902] RAX: ffffffffffffffda RBX: 00007fd113dcffa0 RCX: 00007fd113c41b29 [ 103.395033][ T6902] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 103.402995][ T6902] RBP: 00007fd113cc2756 R08: 0000000000000000 R09: 0000000000000000 [ 103.410950][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.418903][ T6902] R13: 000000000000000b R14: 00007fd113dcffa0 R15: 00007fffeef1e758 [ 103.426861][ T6902] [ 103.429926][ T6902] memory: usage 307200kB, limit 307200kB, failcnt 494 [ 103.436943][ T6902] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 103.444937][ T6902] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 103.452241][ T6902] Memory cgroup stats for /syz1: [ 103.452586][ T6902] cache 32768 [ 103.460880][ T6902] rss 0 [ 103.463761][ T6902] shmem 0 [ 103.466681][ T6902] mapped_file 8192 [ 103.470370][ T6902] dirty 0 [ 103.473277][ T6902] writeback 0 [ 103.476550][ T6902] workingset_refault_anon 140 [ 103.481196][ T6902] workingset_refault_file 596 [ 103.485862][ T6902] swap 450560 [ 103.489128][ T6902] swapcached 0 [ 103.492485][ T6902] pgpgin 137736 [ 103.495933][ T6902] pgpgout 137728 [ 103.499448][ T6902] pgfault 182224 [ 103.502962][ T6902] pgmajfault 82 [ 103.506417][ T6902] inactive_anon 0 [ 103.510019][ T6902] active_anon 0 [ 103.513449][ T6902] inactive_file 28672 [ 103.517421][ T6902] active_file 4096 [ 103.521110][ T6902] unevictable 0 [ 103.524562][ T6902] hierarchical_memory_limit 314572800 [ 103.529904][ T6902] hierarchical_memsw_limit 9223372036854771712 [ 103.536075][ T6902] total_cache 32768 [ 103.539864][ T6902] total_rss 0 [ 103.543118][ T6902] total_shmem 0 [ 103.546572][ T6902] total_mapped_file 8192 [ 103.550783][ T6902] total_dirty 0 [ 103.554229][ T6902] total_writeback 0 [ 103.558012][ T6902] total_workingset_refault_anon 140 [ 103.563178][ T6902] total_workingset_refault_file 596 [ 103.567171][ T6929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.568364][ T6902] total_swap 450560 [ 103.580828][ T6902] total_swapcached 0 [ 103.584732][ T6902] total_pgpgin 137736 [ 103.588890][ T6902] total_pgpgout 137728 [ 103.593097][ T6902] total_pgfault 182224 [ 103.597242][ T6902] total_pgmajfault 82 [ 103.601206][ T6902] total_inactive_anon 0 [ 103.605353][ T6902] total_active_anon 0 [ 103.609308][ T6902] total_inactive_file 28672 [ 103.613796][ T6902] total_active_file 4096 [ 103.618009][ T6902] total_unevictable 0 [ 103.621966][ T6902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1194,pid=6896,uid=0 [ 103.636764][ T6902] Memory cgroup out of memory: Killed process 6896 (syz.1.1194) total-vm:80620kB, anon-rss:488kB, file-rss:9480kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 103.720816][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 103.734145][ T6943] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1206'. [ 103.773404][ T6954] loop4: detected capacity change from 0 to 256 [ 103.830641][ T6958] loop2: detected capacity change from 0 to 512 [ 103.839697][ T6958] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 103.850534][ T6958] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 103.860540][ T6958] EXT4-fs (loop2): group descriptors corrupted! [ 103.881722][ T6965] loop4: detected capacity change from 0 to 512 [ 103.891403][ T4068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.926976][ T29] audit: type=1326 audit(1719489051.185:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.0.1218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a44f5cb29 code=0x0 [ 103.975208][ T6973] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.176314][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 104.191998][ T3201] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.203022][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1221'. [ 104.245427][ T3201] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.258098][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 104.289475][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.296620][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.303927][ T6982] bridge_slave_0: entered allmulticast mode [ 104.310257][ T6982] bridge_slave_0: entered promiscuous mode [ 104.318797][ T3201] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.329563][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.336747][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.344514][ T6982] bridge_slave_1: entered allmulticast mode [ 104.350908][ T6982] bridge_slave_1: entered promiscuous mode [ 104.366865][ T3201] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.378811][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.389178][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.408237][ T6982] team0: Port device team_slave_0 added [ 104.415041][ T6982] team0: Port device team_slave_1 added [ 104.429873][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.436870][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.462860][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.476692][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.483676][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.509577][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.534924][ T3201] bridge_slave_1: left allmulticast mode [ 104.540667][ T3201] bridge_slave_1: left promiscuous mode [ 104.546397][ T3201] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.554178][ T3201] bridge_slave_0: left allmulticast mode [ 104.559819][ T3201] bridge_slave_0: left promiscuous mode [ 104.565648][ T3201] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.656233][ T3201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.666660][ T3201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.677232][ T3201] bond0 (unregistering): Released all slaves [ 104.695029][ T6982] hsr_slave_0: entered promiscuous mode [ 104.701128][ T6982] hsr_slave_1: entered promiscuous mode [ 104.707245][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.714968][ T6982] Cannot create hsr debugfs directory [ 104.757344][ T3201] hsr_slave_0: left promiscuous mode [ 104.763644][ T3201] hsr_slave_1: left promiscuous mode [ 104.769720][ T3201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.777151][ T3201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.784797][ T3201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.792244][ T3201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.801000][ T3201] veth1_macvtap: left promiscuous mode [ 104.806622][ T3201] veth1_vlan: left promiscuous mode [ 104.811824][ T3201] veth0_vlan: left promiscuous mode [ 104.849118][ T29] audit: type=1400 audit(1719489052.105:2099): avc: denied { write } for pid=7011 comm="syz.3.1224" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 104.881843][ T7019] loop3: detected capacity change from 0 to 512 [ 104.889171][ T7019] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.897162][ T7019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 104.905212][ T7019] System zones: 1-12 [ 104.909309][ T7019] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1227: iget: bad extended attribute block 262144 [ 104.926646][ T7018] loop1: detected capacity change from 0 to 256 [ 104.933396][ T7019] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1227: couldn't read orphan inode 15 (err -117) [ 104.945228][ T29] audit: type=1400 audit(1719489052.185:2100): avc: denied { mount } for pid=7015 comm="syz.4.1226" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.945254][ T29] audit: type=1400 audit(1719489052.185:2101): avc: denied { watch watch_reads } for pid=7015 comm="syz.4.1226" path="/root/syzkaller.WqLWZH/146/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 104.977278][ T7019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.991850][ T29] audit: type=1400 audit(1719489052.195:2102): avc: denied { mount } for pid=7015 comm="syz.4.1226" name="/" dev="hugetlbfs" ino=19842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.993490][ T7018] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.045689][ T7024] loop0: detected capacity change from 0 to 512 [ 105.075151][ T3201] team0 (unregistering): Port device team_slave_1 removed [ 105.086962][ T3201] team0 (unregistering): Port device team_slave_0 removed [ 105.157863][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1226'. [ 105.287021][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 105.296089][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 105.469388][ T6982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.479818][ T6982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.489230][ T6982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.498275][ T6982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.539635][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.553883][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.563569][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.570703][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.592423][ T6982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.602914][ T6982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.617748][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.624859][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.699345][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.796065][ T7053] IPv6: NLM_F_REPLACE set, but no existing node found! [ 105.833592][ T6982] veth0_vlan: entered promiscuous mode [ 105.842686][ T6982] veth1_vlan: entered promiscuous mode [ 105.862386][ T6982] veth0_macvtap: entered promiscuous mode [ 105.870138][ T4305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.870840][ T6982] veth1_macvtap: entered promiscuous mode [ 105.890579][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.901121][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.911071][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.921909][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.933004][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.944313][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.954858][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.964802][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.975286][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.986274][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.996203][ T6982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.004984][ T6982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.013681][ T6982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.022420][ T6982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.074550][ T7071] loop2: detected capacity change from 0 to 512 [ 106.087914][ T7071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.100477][ T7071] ext4 filesystem being mounted at /root/syzkaller.Ap2OUZ/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.121171][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.130500][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 106.140193][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1236'. [ 106.146056][ T7082] vhci_hcd: default hub control req: 6000 v0000 i0000 l0 [ 106.659170][ T7112] loop4: detected capacity change from 0 to 128 [ 106.667144][ T7112] FAT-fs (loop4): Unrecognized mount option "ÿ" or missing value [ 106.688193][ T7118] loop1: detected capacity change from 0 to 512 [ 106.705547][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.718902][ T7118] ext4 filesystem being mounted at /root/syzkaller.LejMWK/172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.738265][ T4068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.750466][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 106.796944][ T7131] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 106.796944][ T7131] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 106.796944][ T7131] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 106.796944][ T7131] csum(0x350e00a0 start=160 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 106.796944][ T7131] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 106.796944][ T7131] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 106.796944][ T7131] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 106.846372][ T7131] dev name=veth0 feat=0x000061164fdd19e9 [ 106.852019][ T7131] skb linear: 00000000: 45 02 29 89 a5 45 00 00 0f 2f 3c cf ac 14 14 18 [ 106.860529][ T7131] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 106.869040][ T7131] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 106.877552][ T7131] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 106.886065][ T7131] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 106.894578][ T7131] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 106.900943][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 106.900956][ T29] audit: type=1400 audit(1719489054.155:2108): avc: denied { ioctl } for pid=7128 comm="syz.1.1251" path="socket:[20136]" dev="sockfs" ino=20136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.903055][ T7131] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.903071][ T7131] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.950699][ T7131] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.959316][ T7131] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.968065][ T7131] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.976551][ T7131] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.985036][ T7131] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.993507][ T7131] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.001991][ T7131] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.010474][ T7131] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.018959][ T7131] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.027450][ T7131] ------------[ cut here ]------------ [ 107.032878][ T7131] offset+2 (13608) > skb_headlen() (10633) [ 107.038833][ T7131] WARNING: CPU: 1 PID: 7131 at net/core/dev.c:3334 skb_checksum_help+0x43b/0x450 [ 107.047947][ T7131] Modules linked in: [ 107.051829][ T7131] CPU: 1 PID: 7131 Comm: syz.3.1254 Not tainted 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 107.061879][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.071938][ T7131] RIP: 0010:skb_checksum_help+0x43b/0x450 [ 107.077685][ T7131] Code: 90 4c 89 ff e8 f6 41 60 fd 41 8b 1f 4c 89 e7 e8 eb 41 60 fd 41 2b 1c 24 48 c7 c7 6a 5a e1 85 48 89 ee 89 da e8 56 ea 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 45 fe ff ff 0f 1f 80 00 00 00 00 90 [ 107.097295][ T7131] RSP: 0018:ffffc900012ff410 EFLAGS: 00010246 [ 107.103357][ T7131] RAX: 2b2f93e3da0d0300 RBX: 0000000000002989 RCX: 0000000000040000 [ 107.111342][ T7131] RDX: ffffc9000a46a000 RSI: 000000000003ffff RDI: 0000000000040000 [ 107.119311][ T7131] RBP: 0000000000003528 R08: ffffffff81110bd7 R09: 0000000000000000 [ 107.127292][ T7131] R10: 0001ffffffffffff R11: ffff88810b7b9080 R12: ffff888124dd1574 [ 107.135271][ T7131] R13: 0000000065254b22 R14: ffff888124dd1500 R15: ffff888124dd1570 [ 107.143223][ T7131] FS: 00007ff0ba51f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 107.152145][ T7131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.158747][ T7131] CR2: 000000002000b000 CR3: 0000000134d60000 CR4: 00000000003506f0 [ 107.166709][ T7131] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.174672][ T7131] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.182622][ T7131] Call Trace: [ 107.185895][ T7131] [ 107.188809][ T7131] ? __warn+0x13c/0x350 [ 107.192946][ T7131] ? report_bug+0x315/0x420 [ 107.197450][ T7131] ? skb_checksum_help+0x43b/0x450 [ 107.202543][ T7131] ? handle_bug+0x3e/0x70 [ 107.206864][ T7131] ? exc_invalid_op+0x1a/0x50 [ 107.211521][ T7131] ? asm_exc_invalid_op+0x1a/0x20 [ 107.216543][ T7131] ? __warn_printk+0x167/0x1b0 [ 107.221289][ T7131] ? skb_checksum_help+0x43b/0x450 [ 107.226394][ T7131] ip_do_fragment+0xdb/0xd00 [ 107.230976][ T7131] ? __folio_put+0x114/0x150 [ 107.235564][ T7131] ? free_large_kmalloc+0x8c/0xb0 [ 107.240599][ T7131] ? kfree+0x148/0x290 [ 107.244663][ T7131] ? __pfx_ip_finish_output2+0x10/0x10 [ 107.250105][ T7131] ? skb_release_data+0x583/0x5a0 [ 107.255129][ T7131] ip_fragment+0xd2/0x140 [ 107.259458][ T7131] ip_finish_output+0x1c4/0x2a0 [ 107.264320][ T7131] ip_output+0xab/0x170 [ 107.268475][ T7131] ? __pfx_ip_finish_output+0x10/0x10 [ 107.273864][ T7131] ? __pfx_ip_output+0x10/0x10 [ 107.273885][ T7131] ip_local_out+0xab/0xd0 [ 107.273906][ T7131] iptunnel_xmit+0x33f/0x460 [ 107.273930][ T7131] ip_tunnel_xmit+0x1685/0x1740 [ 107.292425][ T7131] ipgre_xmit+0x5f4/0x6d0 [ 107.296783][ T7131] dev_hard_start_xmit+0x119/0x3f0 [ 107.299808][ T7135] loop0: detected capacity change from 0 to 128 [ 107.301884][ T7131] __dev_queue_xmit+0xf83/0x1e50 [ 107.301911][ T7131] ? __dev_queue_xmit+0x161/0x1e50 [ 107.318162][ T7131] packet_xmit+0x4b/0x1e0 [ 107.322477][ T7131] packet_sendmsg+0x2ae1/0x3320 [ 107.327325][ T7131] ? selinux_socket_sendmsg+0x182/0x1b0 [ 107.332860][ T7131] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.338046][ T7131] __sock_sendmsg+0x140/0x180 [ 107.342711][ T7131] ____sys_sendmsg+0x312/0x410 [ 107.347556][ T7131] __sys_sendmsg+0x1e9/0x280 [ 107.352131][ T7131] __x64_sys_sendmsg+0x46/0x50 [ 107.356891][ T7131] x64_sys_call+0xb25/0x2d70 [ 107.361464][ T7131] do_syscall_64+0xc9/0x1c0 [ 107.365959][ T7131] ? clear_bhb_loop+0x55/0xb0 [ 107.370620][ T7131] ? clear_bhb_loop+0x55/0xb0 [ 107.375286][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.381161][ T7131] RIP: 0033:0x7ff0bb29db29 [ 107.385573][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.405181][ T7131] RSP: 002b:00007ff0ba51f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.413571][ T7131] RAX: ffffffffffffffda RBX: 00007ff0bb42bfa0 RCX: 00007ff0bb29db29 [ 107.421557][ T7131] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 107.429517][ T7131] RBP: 00007ff0bb31e756 R08: 0000000000000000 R09: 0000000000000000 [ 107.437480][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.445452][ T7131] R13: 000000000000000b R14: 00007ff0bb42bfa0 R15: 00007ffd7a5389f8 [ 107.453426][ T7131] [ 107.456436][ T7131] ---[ end trace 0000000000000000 ]--- [ 107.493283][ T7139] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.628892][ T7155] serio: Serial port pts0 [ 107.653270][ T7159] loop1: detected capacity change from 0 to 512 [ 107.665855][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.679133][ T7159] ext4 filesystem being mounted at /root/syzkaller.LejMWK/175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.701029][ T4068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.751076][ T29] audit: type=1400 audit(1719489055.005:2109): avc: denied { ioctl } for pid=7170 comm="syz.1.1263" path="socket:[20193]" dev="sockfs" ino=20193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.285181][ T7193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59152 sclass=netlink_route_socket pid=7193 comm=syz.0.1271 [ 108.326931][ T7139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.382476][ T7201] loop2: detected capacity change from 0 to 512 [ 108.401430][ T7206] loop0: detected capacity change from 0 to 512 [ 108.415812][ T7206] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.423496][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.428881][ T29] audit: type=1400 audit(1719489055.675:2110): avc: denied { lock } for pid=7207 comm="syz.1.1277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.437145][ T7201] ext4 filesystem being mounted at /root/syzkaller.Ap2OUZ/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.486874][ T7206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 108.496518][ T7206] System zones: 1-12 [ 108.500818][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.503129][ T7214] loop3: detected capacity change from 0 to 256 [ 108.510371][ T7206] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.1276: iget: bad extended attribute block 262144 [ 108.544077][ T7206] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1276: couldn't read orphan inode 15 (err -117) [ 108.558881][ T7206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.614910][ T7223] loop2: detected capacity change from 0 to 128 [ 108.717965][ T7229] loop4: detected capacity change from 0 to 512 [ 108.860984][ T7229] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 108.875532][ T7229] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1282: invalid indirect mapped block 1 (level 1) [ 108.889635][ T7229] EXT4-fs (loop4): 1 truncate cleaned up [ 108.896037][ T7229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.966593][ T7238] IPv6: NLM_F_REPLACE set, but no existing node found! [ 109.142967][ T7245] __nla_validate_parse: 8 callbacks suppressed [ 109.143025][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 109.159098][ T7245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1285'. [ 109.366306][ T6532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.422220][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 109.431148][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 109.440111][ T7254] netlink: 'syz.0.1286': attribute type 6 has an invalid length. [ 109.461689][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 109.472714][ T4594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.539597][ T7259] loop0: detected capacity change from 0 to 1024 [ 109.547840][ T7259] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.562209][ T7259] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1286: Invalid block bitmap block 0 in block_group 0 [ 109.577295][ T7259] Quota error (device loop0): write_blk: dquota write failed [ 109.584750][ T7259] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 109.596179][ T7266] loop2: detected capacity change from 0 to 136 [ 109.600141][ T7259] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1286: Failed to acquire dquot type 0 [ 109.614164][ T7259] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.1286: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.627984][ T7259] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1286: Invalid inode bitmap blk 0 in block_group 0 [ 109.640969][ T55] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 109.649972][ T55] EXT4-fs error (device loop0): ext4_release_dquot:6883: comm kworker/u8:4: Failed to release dquot type 0 [ 109.652605][ T7259] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 109.670514][ T7259] EXT4-fs (loop0): 1 orphan inode deleted [ 109.676839][ T7259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.692317][ T7236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.719727][ T6532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.752748][ T7279] loop2: detected capacity change from 0 to 164 [ 109.754213][ T7280] loop3: detected capacity change from 0 to 128 [ 109.767482][ T7279] Unable to read rock-ridge attributes [ 110.059198][ T7283] loop4: detected capacity change from 0 to 512 [ 110.074329][ T7286] loop1: detected capacity change from 0 to 512 [ 110.085564][ T7283] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 110.096838][ T7282] loop0: detected capacity change from 0 to 512 [ 110.100077][ T7283] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1294: invalid indirect mapped block 1 (level 1) [ 110.114801][ T7286] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 110.119535][ T7283] EXT4-fs (loop4): 1 truncate cleaned up [ 110.133812][ T7286] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1298: invalid indirect mapped block 1 (level 1) [ 110.139801][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.153379][ T7286] EXT4-fs (loop1): 1 truncate cleaned up [ 110.170735][ T7286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.197405][ T7282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.209946][ T7282] ext4 filesystem being mounted at /root/syzkaller.lQdrPb/32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.231128][ T6532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.306217][ T7303] serio: Serial port pts0 [ 110.307109][ T7299] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 110.429733][ T29] audit: type=1400 audit(1719489057.685:2111): avc: denied { connect } for pid=7312 comm="syz.0.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.492283][ T7326] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.559623][ T4594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.593511][ T4068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.621543][ T7334] loop4: detected capacity change from 0 to 2048 [ 110.644739][ T7336] loop1: detected capacity change from 0 to 512 [ 110.654843][ T29] audit: type=1400 audit(1719489057.915:2112): avc: denied { ioctl } for pid=7337 comm="syz.3.1312" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20401 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.655793][ T7336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.690025][ T7334] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 110.693257][ T7336] ext4 filesystem being mounted at /root/syzkaller.LejMWK/184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.694533][ T7334] loop4: p3 start 4259840 is beyond EOD, [ 110.790561][ T7342] loop3: detected capacity change from 0 to 512 [ 110.797008][ T7334] truncated [ 110.818187][ T7342] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.825088][ T4068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.837465][ T7342] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.848091][ T7342] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 110.858641][ T7342] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1312: inode #15: comm syz.3.1312: iget: illegal inode # [ 110.871748][ T7342] EXT4-fs (loop3): Remounting filesystem read-only [ 110.881787][ T7342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.903832][ T7342] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 110.906387][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1310'. [ 110.915460][ T7342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.953315][ T29] audit: type=1400 audit(1719489058.205:2113): avc: denied { map } for pid=7352 comm="syz.1.1314" path="socket:[21129]" dev="sockfs" ino=21129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.977136][ T29] audit: type=1400 audit(1719489058.205:2114): avc: denied { read } for pid=7352 comm="syz.1.1314" path="socket:[21129]" dev="sockfs" ino=21129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.009245][ T7355] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 111.061100][ T7364] serio: Serial port pts0 [ 111.201007][ T7386] netlink: 194 bytes leftover after parsing attributes in process `syz.3.1322'. [ 111.211242][ T7386] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 111.220052][ T7386] 0ªX¹¦Dö»: entered allmulticast mode [ 111.324847][ T7326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.336851][ T7396] loop2: detected capacity change from 0 to 512 [ 111.354828][ T7396] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.361618][ T7396] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.379451][ T7396] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 111.390941][ T7396] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1327: inode #15: comm syz.2.1327: iget: illegal inode # [ 111.413246][ T7396] EXT4-fs (loop2): Remounting filesystem read-only [ 111.421220][ T7396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.460109][ T7396] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 111.464747][ T7405] loop3: detected capacity change from 0 to 128 [ 111.470325][ T7396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.496385][ T7407] loop0: detected capacity change from 0 to 2048 [ 111.503634][ T7405] FAT-fs (loop3): Unrecognized mount option "ÿ" or missing value [ 111.545337][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.647560][ T6532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.738092][ T7426] loop0: detected capacity change from 0 to 164 [ 111.773449][ T7426] Unable to read rock-ridge attributes [ 111.886494][ T7428] loop0: detected capacity change from 0 to 2048 [ 111.954928][ T7428] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 111.961394][ T7428] loop0: p3 start 4259840 is beyond EOD, truncated [ 112.085530][ T7430] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.129495][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 112.393485][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 112.393497][ T29] audit: type=1326 audit(1719489059.645:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0bb29db29 code=0x0 [ 112.574576][ T29] audit: type=1326 audit(1719489059.835:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7452 comm="syz.4.1344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1577e34b29 code=0x0 [ 112.615375][ T7464] loop2: detected capacity change from 0 to 512 [ 112.788369][ T7473] loop2: detected capacity change from 0 to 512 [ 112.854949][ T7473] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 112.869588][ T7473] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1349: invalid indirect mapped block 1 (level 1) [ 112.885442][ T7473] EXT4-fs (loop2): 1 truncate cleaned up [ 112.891808][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.976229][ T7430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.220736][ T7483] loop0: detected capacity change from 0 to 512 [ 113.282851][ T29] audit: type=1400 audit(1719489060.535:2120): avc: denied { read } for pid=7494 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.286342][ T7495] erspan1: entered promiscuous mode [ 113.313643][ T7497] loop3: detected capacity change from 0 to 256 [ 113.328748][ T7497] FAT-fs (loop3): Directory bread(block 64) failed [ 113.335577][ T7497] FAT-fs (loop3): Directory bread(block 65) failed [ 113.342209][ T7497] FAT-fs (loop3): Directory bread(block 66) failed [ 113.348945][ T7497] FAT-fs (loop3): Directory bread(block 67) failed [ 113.355591][ T7497] FAT-fs (loop3): Directory bread(block 68) failed [ 113.362183][ T7497] FAT-fs (loop3): Directory bread(block 69) failed [ 113.369141][ T7497] FAT-fs (loop3): Directory bread(block 70) failed [ 113.375680][ T7497] FAT-fs (loop3): Directory bread(block 71) failed [ 113.382243][ T7497] FAT-fs (loop3): Directory bread(block 72) failed [ 113.391559][ T7497] FAT-fs (loop3): Directory bread(block 73) failed [ 113.435502][ T29] audit: type=1400 audit(1719489060.695:2121): avc: denied { mounton } for pid=7496 comm="syz.3.1359" path="/root/syzkaller.ErxbFU/245/file0/bus" dev="loop3" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 113.450805][ T7497] Trying to write to read-only block-device loop3 [ 113.466678][ T7497] bio_check_eod: 21132 callbacks suppressed [ 113.466685][ T7497] syz.3.1359: attempt to access beyond end of device [ 113.466685][ T7497] loop3: rw=2049, sector=1224, nr_sectors = 540 limit=256 [ 113.488451][ T7497] xt_hashlimit: size too large, truncated to 1048576 [ 113.495147][ T7497] xt_hashlimit: overflow, try lower: 0/0 [ 113.505554][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.554948][ T4305] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 113.562548][ T4305] FAT-fs (loop3): Filesystem has been set read-only [ 113.575127][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.592950][ T7506] loop0: detected capacity change from 0 to 512 [ 113.620420][ T7506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.633285][ T7506] ext4 filesystem being mounted at /root/syzkaller.lQdrPb/45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.650748][ T29] audit: type=1400 audit(1719489060.915:2122): avc: denied { bind } for pid=7505 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.670918][ T29] audit: type=1400 audit(1719489060.915:2123): avc: denied { connect } for pid=7505 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.695570][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.712436][ T7506] tipc: Started in network mode [ 113.717367][ T7506] tipc: Node identity cacd4bb3a5eafcc8, cluster identity 4711 [ 113.724843][ T7506] tipc: Enabling of bearer rejected, failed to enable media [ 113.737166][ T29] audit: type=1326 audit(1719489060.995:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.1365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x0 [ 113.760349][ T7506] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1364: corrupted xattr block 32: invalid header [ 113.773870][ T7506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 113.782936][ T7506] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1364: corrupted xattr block 32: invalid header [ 113.796614][ T7506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 113.805882][ T7506] EXT4-fs error (device loop0): ext4_xattr_block_find:1871: inode #15: comm syz.0.1364: corrupted xattr block 32: invalid header [ 113.807115][ T29] audit: type=1400 audit(1719489061.065:2125): avc: denied { setattr } for pid=7505 comm="syz.0.1364" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.846105][ T6532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.846849][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.897781][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 113.950001][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.961188][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.968279][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.976414][ T7509] bridge_slave_0: entered allmulticast mode [ 113.983575][ T7509] bridge_slave_0: entered promiscuous mode [ 113.990913][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.998018][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.005439][ T7509] bridge_slave_1: entered allmulticast mode [ 114.011938][ T7509] bridge_slave_1: entered promiscuous mode [ 114.034639][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.038945][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.070741][ T7509] team0: Port device team_slave_0 added [ 114.078678][ T7509] team0: Port device team_slave_1 added [ 114.096686][ T40] bridge_slave_1: left allmulticast mode [ 114.102342][ T40] bridge_slave_1: left promiscuous mode [ 114.108019][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.115717][ T40] bridge_slave_0: left allmulticast mode [ 114.121350][ T40] bridge_slave_0: left promiscuous mode [ 114.127030][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.238400][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.248579][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.258676][ T40] bond0 (unregistering): Released all slaves [ 114.266682][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.273626][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.299553][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.319101][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.326098][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.352176][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.364726][ T40] tipc: Left network mode [ 114.384132][ T7509] hsr_slave_0: entered promiscuous mode [ 114.390278][ T7509] hsr_slave_1: entered promiscuous mode [ 114.396292][ T7509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.403934][ T7509] Cannot create hsr debugfs directory [ 114.421755][ T40] hsr_slave_0: left promiscuous mode [ 114.427652][ T40] hsr_slave_1: left promiscuous mode [ 114.434604][ T40] veth1_macvtap: left promiscuous mode [ 114.440071][ T40] veth1_vlan: left promiscuous mode [ 114.445276][ T40] veth0_vlan: left promiscuous mode [ 114.511140][ T40] team0 (unregistering): Port device team_slave_1 removed [ 114.521660][ T40] team0 (unregistering): Port device team_slave_0 removed [ 114.578912][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 114.587886][ T7545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.595420][ T7545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.603011][ T7545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.610442][ T7545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.636687][ T7547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1371'. [ 114.704082][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 114.743342][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.750535][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.759196][ T7532] bridge_slave_0: entered allmulticast mode [ 114.765879][ T7532] bridge_slave_0: entered promiscuous mode [ 114.773081][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.780187][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.798921][ T7532] bridge_slave_1: entered allmulticast mode [ 114.805495][ T7532] bridge_slave_1: entered promiscuous mode [ 114.835966][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.846161][ T7561] loop0: detected capacity change from 0 to 256 [ 114.847291][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.882488][ T7561] FAT-fs (loop0): Directory bread(block 64) failed [ 114.885852][ T7532] team0: Port device team_slave_0 added [ 114.889676][ T7561] FAT-fs (loop0): Directory bread(block 65) failed [ 114.901674][ T7561] FAT-fs (loop0): Directory bread(block 66) failed [ 114.908762][ T7561] FAT-fs (loop0): Directory bread(block 67) failed [ 114.915464][ T7561] FAT-fs (loop0): Directory bread(block 68) failed [ 114.921988][ T7561] FAT-fs (loop0): Directory bread(block 69) failed [ 114.928581][ T7561] FAT-fs (loop0): Directory bread(block 70) failed [ 114.935178][ T7561] FAT-fs (loop0): Directory bread(block 71) failed [ 114.937453][ T7532] team0: Port device team_slave_1 added [ 114.941724][ T7561] FAT-fs (loop0): Directory bread(block 72) failed [ 114.953840][ T7561] FAT-fs (loop0): Directory bread(block 73) failed [ 114.969128][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.976106][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.002030][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.018783][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.025870][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.028218][ T7561] Trying to write to read-only block-device loop0 [ 115.051837][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.058229][ T7561] syz.0.1375: attempt to access beyond end of device [ 115.058229][ T7561] loop0: rw=2049, sector=1224, nr_sectors = 540 limit=256 [ 115.069383][ T7565] xt_hashlimit: size too large, truncated to 1048576 [ 115.089246][ T7565] xt_hashlimit: overflow, try lower: 0/0 [ 115.097757][ T40] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.116393][ T7532] hsr_slave_0: entered promiscuous mode [ 115.122667][ T7532] hsr_slave_1: entered promiscuous mode [ 115.126530][ T6532] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 115.135829][ T6532] FAT-fs (loop0): Filesystem has been set read-only [ 115.142595][ T7532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.150765][ T7532] Cannot create hsr debugfs directory [ 115.186209][ T40] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.202187][ T7570] loop4: detected capacity change from 0 to 512 [ 115.213065][ T7570] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.226985][ T7570] EXT4-fs (loop4): 1 orphan inode deleted [ 115.232775][ T7570] EXT4-fs (loop4): 1 truncate cleaned up [ 115.238835][ T7570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.239955][ T40] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.252113][ T7570] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.277828][ T7509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.289089][ T7509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.299696][ T7509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.310707][ T7509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.317759][ T29] audit: type=1400 audit(1719489062.575:2126): avc: denied { override_creds } for pid=7569 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.347390][ T40] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.403928][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.425133][ T7509] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.437883][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.444961][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.470185][ T7509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.480577][ T7509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.494896][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.502025][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.518364][ T40] bridge_slave_1: left allmulticast mode [ 115.524111][ T40] bridge_slave_1: left promiscuous mode [ 115.529776][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.550301][ T40] bridge_slave_0: left allmulticast mode [ 115.556023][ T40] bridge_slave_0: left promiscuous mode [ 115.561690][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.676719][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.687057][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.696870][ T40] bond0 (unregistering): Released all slaves [ 115.714707][ T7582] erspan1: entered promiscuous mode [ 115.736324][ T40] tipc: Left network mode [ 115.788312][ T7509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.866338][ T40] hsr_slave_0: left promiscuous mode [ 115.874637][ T40] hsr_slave_1: left promiscuous mode [ 115.878275][ T7598] loop2: detected capacity change from 0 to 128 [ 115.887977][ T7598] FAT-fs (loop2): Unrecognized mount option "ÿ" or missing value [ 115.896185][ T40] veth1_macvtap: left promiscuous mode [ 115.901675][ T40] veth1_vlan: left promiscuous mode [ 115.906914][ T40] veth0_vlan: left promiscuous mode [ 115.977935][ T40] team0 (unregistering): Port device team_slave_1 removed [ 115.988576][ T40] team0 (unregistering): Port device team_slave_0 removed [ 116.074375][ T7509] veth0_vlan: entered promiscuous mode [ 116.082492][ T7509] veth1_vlan: entered promiscuous mode [ 116.099500][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 116.184464][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.191550][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.199827][ T7576] bridge_slave_0: entered allmulticast mode [ 116.207056][ T7576] bridge_slave_0: entered promiscuous mode [ 116.216506][ T7509] veth0_macvtap: entered promiscuous mode [ 116.222875][ T7532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.235923][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.243063][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.250596][ T7576] bridge_slave_1: entered allmulticast mode [ 116.257274][ T7576] bridge_slave_1: entered promiscuous mode [ 116.264413][ T7532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.273555][ T7532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.283484][ T7532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.304517][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.324049][ T7509] veth1_macvtap: entered promiscuous mode [ 116.331751][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.356440][ T7576] team0: Port device team_slave_0 added [ 116.366300][ T7576] team0: Port device team_slave_1 added [ 116.381763][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.388797][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.414849][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.431778][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.438767][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.464682][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.481259][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.491800][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.501670][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.512195][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.522927][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.533193][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.543666][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.553501][ T7509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.563976][ T7509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.574816][ T7509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.587244][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.608023][ T7509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.616780][ T7509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.625597][ T7509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.634356][ T7509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.650291][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.669637][ T7576] hsr_slave_0: entered promiscuous mode [ 116.675791][ T7576] hsr_slave_1: entered promiscuous mode [ 116.699087][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.739431][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.764992][ T7600] chnl_net:caif_netlink_parms(): no params data found [ 116.814139][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.848738][ T7626] loop2: detected capacity change from 0 to 512 [ 116.880099][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.887396][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.894828][ T7600] bridge_slave_0: entered allmulticast mode [ 116.901229][ T7600] bridge_slave_0: entered promiscuous mode [ 116.909663][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.916920][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.925915][ T7600] bridge_slave_1: entered allmulticast mode [ 116.932517][ T7600] bridge_slave_1: entered promiscuous mode [ 116.945020][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.959387][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.984722][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.998721][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.011994][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.028532][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.035590][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.044630][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.051922][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.067888][ T7600] team0: Port device team_slave_0 added [ 117.076193][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.089960][ T7600] team0: Port device team_slave_1 added [ 117.108704][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.115730][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.141783][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.161419][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.172850][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.180000][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.206123][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.252867][ T7600] hsr_slave_0: entered promiscuous mode [ 117.259092][ T7600] hsr_slave_1: entered promiscuous mode [ 117.265145][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.272689][ T7600] Cannot create hsr debugfs directory [ 117.297911][ T40] bridge_slave_1: left allmulticast mode [ 117.303578][ T40] bridge_slave_1: left promiscuous mode [ 117.309316][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.323978][ T40] bridge_slave_0: left allmulticast mode [ 117.329653][ T40] bridge_slave_0: left promiscuous mode [ 117.335350][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.342374][ T29] audit: type=1326 audit(1719489064.595:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.1.1393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9510cab29 code=0x0 [ 117.367244][ T40] bridge_slave_1: left allmulticast mode [ 117.372957][ T40] bridge_slave_1: left promiscuous mode [ 117.378795][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.387240][ T40] bridge_slave_0: left allmulticast mode [ 117.392921][ T40] bridge_slave_0: left promiscuous mode [ 117.398600][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.565988][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.576290][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.586353][ T40] bond0 (unregistering): Released all slaves [ 117.597277][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.608083][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.618805][ T40] bond0 (unregistering): Released all slaves [ 117.631928][ T7639] erspan1: entered promiscuous mode [ 117.659499][ T40] tipc: Left network mode [ 117.671021][ T40] tipc: Left network mode [ 117.685186][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.759026][ T40] hsr_slave_0: left promiscuous mode [ 117.765284][ T40] hsr_slave_1: left promiscuous mode [ 117.772127][ T40] hsr_slave_0: left promiscuous mode [ 117.778242][ T40] hsr_slave_1: left promiscuous mode [ 117.784060][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.791461][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.799034][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.806530][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.819186][ T40] veth1_macvtap: left promiscuous mode [ 117.824842][ T40] veth1_vlan: left promiscuous mode [ 117.830047][ T40] veth0_vlan: left promiscuous mode [ 117.837352][ T40] veth1_macvtap: left promiscuous mode [ 117.842828][ T40] veth0_macvtap: left promiscuous mode [ 117.848444][ T40] veth1_vlan: left promiscuous mode [ 117.872620][ T7661] loop2: detected capacity change from 0 to 512 [ 117.907701][ T7661] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.922326][ T7661] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1395: invalid indirect mapped block 1 (level 1) [ 117.937613][ T7661] EXT4-fs (loop2): 1 truncate cleaned up [ 118.079922][ T40] team0 (unregistering): Port device team_slave_1 removed [ 118.096068][ T40] team0 (unregistering): Port device team_slave_0 removed [ 118.181377][ T40] team0 (unregistering): Port device team_slave_1 removed [ 118.191859][ T40] team0 (unregistering): Port device team_slave_0 removed [ 118.244284][ T7532] veth0_vlan: entered promiscuous mode [ 118.255910][ T7532] veth1_vlan: entered promiscuous mode [ 118.285994][ T7532] veth0_macvtap: entered promiscuous mode [ 118.294520][ T7532] veth1_macvtap: entered promiscuous mode [ 118.304979][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.315767][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.325646][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.336132][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.347335][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.375229][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.385844][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.395679][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.406101][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.423105][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.442906][ T7576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.457776][ T7532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.466833][ T7532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.475668][ T7532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.484484][ T7532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.500138][ T7576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.510400][ T7576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.521276][ T7576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.603190][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.649269][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.658405][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.665516][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.676812][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.684068][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.722040][ T7576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.736473][ T7680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1401'. [ 118.760922][ T7600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.769991][ T7600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.778813][ T7600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.787666][ T7600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.802085][ T29] audit: type=1400 audit(1719489066.055:2128): avc: denied { mount } for pid=7679 comm="syz.3.1401" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 118.824472][ T7680] bond0: entered promiscuous mode [ 118.829522][ T7680] bond_slave_0: entered promiscuous mode [ 118.835262][ T7680] bond_slave_1: entered promiscuous mode [ 118.858590][ T29] audit: type=1400 audit(1719489066.115:2129): avc: denied { unmount } for pid=7532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 118.859577][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.959828][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.986288][ T7600] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.004980][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.012065][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.022353][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.029431][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.040038][ T29] audit: type=1326 audit(1719489066.295:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.2.1403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x0 [ 119.070216][ T7576] veth0_vlan: entered promiscuous mode [ 119.081394][ T7600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.091831][ T7600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.108277][ T7576] veth1_vlan: entered promiscuous mode [ 119.135986][ T7576] veth0_macvtap: entered promiscuous mode [ 119.146449][ T7576] veth1_macvtap: entered promiscuous mode [ 119.159206][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.169780][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.179682][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.190128][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.200164][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.210639][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.223408][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.242617][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.253214][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.263045][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.273474][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.283455][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.293881][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.305317][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.315739][ T7576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.324518][ T7576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.333249][ T7576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.342080][ T7576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.358512][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.476231][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 119.485305][ T7717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.492802][ T7717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.500490][ T7717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.507928][ T7717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.551754][ T7720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1381'. [ 119.614510][ T7600] veth0_vlan: entered promiscuous mode [ 119.625318][ T7600] veth1_vlan: entered promiscuous mode [ 119.645467][ T7600] veth0_macvtap: entered promiscuous mode [ 119.655403][ T7600] veth1_macvtap: entered promiscuous mode [ 119.667925][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.678538][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.688474][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.698970][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.708888][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.719363][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.731994][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.743238][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.753753][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.763559][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.774228][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.784148][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.794598][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.806121][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.818839][ T7600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.827701][ T7600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.836557][ T7600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.845343][ T7600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.885965][ T7732] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 119.896943][ T29] audit: type=1400 audit(1719489067.155:2131): avc: denied { mount } for pid=7731 comm="syz.2.1408" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.903088][ T7735] loop4: detected capacity change from 0 to 512 [ 119.935445][ T7735] ext4 filesystem being mounted at /root/syzkaller.IpYBzU/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.066206][ T7748] loop2: detected capacity change from 0 to 2048 [ 120.074359][ T7748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.090173][ T29] audit: type=1400 audit(1719489067.345:2132): avc: denied { nlmsg_write } for pid=7755 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 120.091958][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 120.120081][ T7756] ip6gre0: entered promiscuous mode [ 120.125580][ T7756] ip6gre0: entered allmulticast mode [ 120.139163][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 120.148734][ T7756] ip6gre0: left promiscuous mode [ 120.153692][ T7756] ip6gre0: left allmulticast mode [ 120.228633][ T29] audit: type=1326 audit(1719489067.485:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.4.1418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d1f23b29 code=0x0 [ 120.320032][ T7768] loop2: detected capacity change from 0 to 512 [ 120.328690][ T7768] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 120.343198][ T7768] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1419: invalid indirect mapped block 1 (level 1) [ 120.356900][ T7768] EXT4-fs (loop2): 1 truncate cleaned up [ 121.125308][ T29] audit: type=1400 audit(1719489068.385:2134): avc: denied { read } for pid=7772 comm="syz.4.1420" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.148725][ T29] audit: type=1400 audit(1719489068.385:2135): avc: denied { open } for pid=7772 comm="syz.4.1420" path="/dev/rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.172232][ T29] audit: type=1400 audit(1719489068.415:2136): avc: denied { ioctl } for pid=7772 comm="syz.4.1420" path="/dev/rtc0" dev="devtmpfs" ino=219 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.211703][ T7776] loop2: detected capacity change from 0 to 512 [ 121.225198][ T7776] ext4 filesystem being mounted at /root/syzkaller.Ap2OUZ/47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.638084][ T7796] loop2: detected capacity change from 0 to 512 [ 121.704183][ T7796] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 121.719045][ T7796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1429: invalid indirect mapped block 1 (level 1) [ 121.735582][ T7796] EXT4-fs (loop2): 1 truncate cleaned up [ 121.934876][ T29] audit: type=1326 audit(1719489069.195:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.4.1430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d1f23b29 code=0x0 [ 122.450761][ T7808] loop2: detected capacity change from 0 to 128 [ 122.458062][ T7808] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ01777777777777777777777" or missing value [ 122.680819][ T7823] tipc: Started in network mode [ 122.685786][ T7823] tipc: Node identity 2254fdfa5794, cluster identity 4711 [ 122.692929][ T7823] tipc: Enabled bearer , priority 0 [ 122.700445][ T7821] €Â: renamed from syzkaller0 [ 122.706640][ T7821] tipc: Disabling bearer [ 122.741757][ T7830] IPv6: NLM_F_REPLACE set, but no existing node found! [ 122.789776][ T7837] netlink: 'syz.0.1441': attribute type 4 has an invalid length. [ 123.786436][ T7839] loop4: detected capacity change from 0 to 512 [ 123.799746][ T7839] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.803760][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 123.803773][ T29] audit: type=1326 audit(1719489071.055:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001b29559 code=0x7ffc0000 [ 123.814475][ T7839] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1442: invalid indirect mapped block 1 (level 1) [ 123.858515][ T7839] EXT4-fs (loop4): 1 truncate cleaned up [ 123.865260][ T29] audit: type=1326 audit(1719489071.125:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5001b84ba7 code=0x7ffc0000 [ 123.888789][ T29] audit: type=1326 audit(1719489071.125:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001b29559 code=0x7ffc0000 [ 123.912139][ T29] audit: type=1326 audit(1719489071.125:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5001b84ba7 code=0x7ffc0000 [ 123.935476][ T29] audit: type=1326 audit(1719489071.125:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001b29559 code=0x7ffc0000 [ 123.959668][ T29] audit: type=1326 audit(1719489071.125:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5001b84ba7 code=0x7ffc0000 [ 123.983312][ T29] audit: type=1326 audit(1719489071.125:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001b29559 code=0x7ffc0000 [ 124.006791][ T29] audit: type=1326 audit(1719489071.125:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5001b84ba7 code=0x7ffc0000 [ 124.030449][ T29] audit: type=1326 audit(1719489071.125:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001b29559 code=0x7ffc0000 [ 124.054351][ T29] audit: type=1326 audit(1719489071.155:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5001b84ba7 code=0x7ffc0000 [ 124.141269][ T7830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.172893][ T7875] loop3: detected capacity change from 0 to 128 [ 124.198939][ T7881] program syz.1.1452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.367697][ T7906] IPv6: NLM_F_REPLACE set, but no existing node found! [ 125.053322][ T7931] atomic_op ffff88811dea6d28 conn xmit_atomic 0000000000000000 [ 125.201146][ T7906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.263320][ T7944] loop1: detected capacity change from 0 to 4096 [ 125.277621][ T7944] EXT4-fs (loop1): invalid inodes per group: 0 [ 125.277621][ T7944] [ 125.342937][ T7953] loop1: detected capacity change from 0 to 128 [ 125.849399][ T7979] loop4: detected capacity change from 0 to 256 [ 125.861411][ T7979] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 125.869076][ T7979] FAT-fs (loop4): Filesystem has been set read-only [ 125.876520][ T7979] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 126.182188][ T7991] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1488'. [ 126.252388][ T7998] loop0: detected capacity change from 0 to 512 [ 126.262946][ T7998] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 126.271522][ T7998] EXT4-fs mount: 12 callbacks suppressed [ 126.271535][ T7998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.311977][ T8003] syz_tun: entered promiscuous mode [ 126.323113][ T8003] syz_tun: left promiscuous mode [ 126.328673][ T7576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.345581][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 126.370399][ T8008] loop3: detected capacity change from 0 to 512 [ 126.421129][ T8018] loop0: detected capacity change from 0 to 512 [ 126.478645][ T8023] loop0: detected capacity change from 0 to 128 [ 127.062274][ T8029] loop2: detected capacity change from 0 to 512 [ 127.294951][ T8044] syz_tun: entered promiscuous mode [ 127.301073][ T8044] syz_tun: left promiscuous mode [ 127.368235][ T8056] loop3: detected capacity change from 0 to 512 [ 127.376794][ T8058] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 127.427959][ T8060] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 127.519481][ T8065] loop3: detected capacity change from 0 to 256 [ 127.546092][ T8067] loop4: detected capacity change from 0 to 512 [ 127.564711][ T8060] loop0: detected capacity change from 0 to 1024 [ 127.979975][ T8084] loop2: detected capacity change from 0 to 128 [ 128.025686][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 128.168550][ T8095] loop1: detected capacity change from 0 to 512 [ 128.185706][ T8095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.198274][ T8095] ext4 filesystem being mounted at /root/syzkaller.qVGtSf/24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.219192][ T7509] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.315382][ T8107] loop1: detected capacity change from 0 to 512 [ 128.721760][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 128.895448][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 128.946396][ T8143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1535'. [ 128.958360][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1538'. [ 128.967551][ T8144] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 129.013799][ T8146] loop2: detected capacity change from 0 to 512 [ 129.157912][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 129.157924][ T29] audit: type=1400 audit(1719489076.415:2578): avc: denied { getopt } for pid=8170 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.186716][ T29] audit: type=1400 audit(1719489076.445:2579): avc: denied { create } for pid=8170 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 129.206926][ T29] audit: type=1326 audit(1719489076.445:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5001b8db29 code=0x0 [ 129.279528][ T8181] loop1: detected capacity change from 0 to 512 [ 129.287236][ T8185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1552'. [ 129.296628][ T8185] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 129.336148][ T29] audit: type=1400 audit(1719489076.595:2581): avc: denied { shutdown } for pid=8173 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.337143][ T8195] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.368289][ T8195] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1549'. [ 129.377229][ T8195] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 129.389995][ T8195] 0ªX¹¦Dö»: entered allmulticast mode [ 129.453150][ T29] audit: type=1400 audit(1719489076.705:2582): avc: denied { setopt } for pid=8207 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.472727][ T29] audit: type=1400 audit(1719489076.705:2583): avc: denied { accept } for pid=8207 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.550241][ T8216] loop2: detected capacity change from 0 to 512 [ 129.575695][ T29] audit: type=1326 audit(1719489076.835:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8219 comm="syz.3.1562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235b5f0b29 code=0x0 [ 129.602406][ T8216] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 129.617376][ T8216] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1560: invalid indirect mapped block 1 (level 1) [ 129.634722][ T8216] EXT4-fs (loop2): 1 truncate cleaned up [ 129.640909][ T8216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.233603][ T8232] loop1: detected capacity change from 0 to 512 [ 130.274724][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.369707][ T8238] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.420052][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1568'. [ 130.432283][ T8243] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 130.450341][ T8249] loop0: detected capacity change from 0 to 128 [ 130.501576][ T8252] loop1: detected capacity change from 0 to 256 [ 130.530564][ T8259] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1577'. [ 130.553391][ T29] audit: type=1400 audit(1719489077.805:2585): avc: denied { connect } for pid=8261 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.679872][ T29] audit: type=1400 audit(1719489077.935:2586): avc: denied { getopt } for pid=8270 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.691933][ T8273] loop1: detected capacity change from 0 to 2048 [ 130.716164][ T8273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.784435][ T8273] loop1: detected capacity change from 2048 to 0 [ 130.791303][ T29] audit: type=1326 audit(1719489078.045:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.4.1585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d1f23b29 code=0x0 [ 130.819732][ T7509] syz-executor: attempt to access beyond end of device [ 130.819732][ T7509] loop1: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 130.840478][ T50] kworker/u8:3: attempt to access beyond end of device [ 130.840478][ T50] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 130.855043][ T50] kworker/u8:3: attempt to access beyond end of device [ 130.855043][ T50] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 130.868666][ T50] kworker/u8:3: attempt to access beyond end of device [ 130.868666][ T50] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 130.889909][ T50] kworker/u8:3: attempt to access beyond end of device [ 130.889909][ T50] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 130.905175][ T50] kworker/u8:3: attempt to access beyond end of device [ 130.905175][ T50] loop1: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 130.918928][ T50] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #18: block 6: comm kworker/u8:3: unable to read itable block [ 130.935812][ T50] kworker/u8:3: attempt to access beyond end of device [ 130.935812][ T50] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 130.949257][ T50] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 130.965731][ T50] EXT4-fs (loop1): I/O error while writing superblock [ 130.973006][ T7509] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.985438][ T7509] syz-executor: attempt to access beyond end of device [ 130.985438][ T7509] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 130.998878][ T7509] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 131.007262][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 131.018828][ T8276] kmmpd-loop1: attempt to access beyond end of device [ 131.018828][ T8276] loop1: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 131.032252][ T8276] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 131.117415][ T8303] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.135278][ T8291] chnl_net:caif_netlink_parms(): no params data found [ 131.168038][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.175333][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.182562][ T8291] bridge_slave_0: entered allmulticast mode [ 131.189769][ T8291] bridge_slave_0: entered promiscuous mode [ 131.196613][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.203705][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.210959][ T8291] bridge_slave_1: entered allmulticast mode [ 131.217472][ T8291] bridge_slave_1: entered promiscuous mode [ 131.237380][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.250197][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.260756][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.273592][ T8308] loop2: detected capacity change from 0 to 256 [ 131.290475][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.309038][ T8291] team0: Port device team_slave_0 added [ 131.315959][ T8291] team0: Port device team_slave_1 added [ 131.332732][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.339729][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.365716][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.377495][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.384494][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.410445][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.431059][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.477830][ T8291] hsr_slave_0: entered promiscuous mode [ 131.487745][ T8291] hsr_slave_1: entered promiscuous mode [ 131.497061][ T8291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.505978][ T8291] Cannot create hsr debugfs directory [ 131.516041][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.612070][ T11] bridge_slave_1: left allmulticast mode [ 131.617785][ T11] bridge_slave_1: left promiscuous mode [ 131.623416][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.633196][ T11] bridge_slave_0: left allmulticast mode [ 131.638935][ T11] bridge_slave_0: left promiscuous mode [ 131.644650][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.737916][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.746630][ T11] bond_slave_0: left promiscuous mode [ 131.753309][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.765990][ T11] bond_slave_1: left promiscuous mode [ 131.772913][ T11] bond0 (unregistering): Released all slaves [ 131.882020][ T8310] chnl_net:caif_netlink_parms(): no params data found [ 131.927205][ T11] hsr_slave_0: left promiscuous mode [ 131.932813][ T11] hsr_slave_1: left promiscuous mode [ 131.938524][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.946082][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.953822][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.961294][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.972155][ T11] veth1_macvtap: left promiscuous mode [ 131.977791][ T11] veth0_macvtap: left promiscuous mode [ 131.983437][ T11] veth1_vlan: left promiscuous mode [ 131.988699][ T11] veth0_vlan: left promiscuous mode [ 132.061761][ T11] team0 (unregistering): Port device team_slave_1 removed [ 132.072169][ T11] team0 (unregistering): Port device team_slave_0 removed [ 132.108649][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.115888][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.123156][ T8310] bridge_slave_0: entered allmulticast mode [ 132.130225][ T8310] bridge_slave_0: entered promiscuous mode [ 132.137295][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.144407][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.151549][ T8310] bridge_slave_1: entered allmulticast mode [ 132.158958][ T8310] bridge_slave_1: entered promiscuous mode [ 132.180855][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.191623][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.210653][ T8310] team0: Port device team_slave_0 added [ 132.217599][ T8310] team0: Port device team_slave_1 added [ 132.235927][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.242893][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.269113][ T8310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.282567][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.289530][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.315509][ T8310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.350160][ T8310] hsr_slave_0: entered promiscuous mode [ 132.356760][ T8310] hsr_slave_1: entered promiscuous mode [ 132.362618][ T8310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.370522][ T8310] Cannot create hsr debugfs directory [ 132.408374][ T8291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.425684][ T8291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.449270][ T8291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.465188][ T8351] loop0: detected capacity change from 0 to 128 [ 132.467487][ T8291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.501511][ T8310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.546623][ T8310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.561245][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 132.571854][ T8358] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.590081][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.612243][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.626456][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.633594][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.641389][ T8338] bridge_slave_0: entered allmulticast mode [ 132.648885][ T8338] bridge_slave_0: entered promiscuous mode [ 132.659641][ T8310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.674631][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.687169][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.694299][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.698864][ T8365] loop2: detected capacity change from 0 to 256 [ 132.701480][ T8338] bridge_slave_1: entered allmulticast mode [ 132.714996][ T8338] bridge_slave_1: entered promiscuous mode [ 132.725216][ T8310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.747444][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.758020][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.777723][ T8291] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.788777][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.806842][ T8338] team0: Port device team_slave_0 added [ 132.808014][ T8338] team0: Port device team_slave_1 added [ 132.836589][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.843641][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.852682][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.859750][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.875398][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.882391][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.908309][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.919601][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.926579][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.952504][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.968959][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.001703][ T8338] hsr_slave_0: entered promiscuous mode [ 133.007974][ T8338] hsr_slave_1: entered promiscuous mode [ 133.014195][ T8338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.021737][ T8338] Cannot create hsr debugfs directory [ 133.034209][ T8310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.047029][ T8310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.055879][ T8310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.073266][ T8291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.088655][ T8310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.156262][ T11] bridge_slave_1: left allmulticast mode [ 133.161901][ T11] bridge_slave_1: left promiscuous mode [ 133.167608][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.175624][ T11] bridge_slave_0: left allmulticast mode [ 133.181246][ T11] bridge_slave_0: left promiscuous mode [ 133.186966][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.195557][ T11] bridge_slave_1: left allmulticast mode [ 133.201268][ T11] bridge_slave_1: left promiscuous mode [ 133.206981][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.214858][ T11] bridge_slave_0: left allmulticast mode [ 133.220511][ T11] bridge_slave_0: left promiscuous mode [ 133.226262][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.416594][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.428198][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.439569][ T11] bond0 (unregistering): Released all slaves [ 133.451358][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.462169][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.473712][ T11] bond0 (unregistering): Released all slaves [ 133.515237][ T11] tipc: Left network mode [ 133.529421][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.553417][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.567663][ T8310] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.577536][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.584729][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.607192][ T8310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.617634][ T8310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.637884][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.645016][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.670023][ T11] hsr_slave_0: left promiscuous mode [ 133.676067][ T11] hsr_slave_1: left promiscuous mode [ 133.681997][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.689472][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.696933][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.704460][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.713516][ T11] hsr_slave_0: left promiscuous mode [ 133.719450][ T11] hsr_slave_1: left promiscuous mode [ 133.725518][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.733054][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.740649][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.748137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.758726][ T11] veth1_macvtap: left promiscuous mode [ 133.764296][ T11] veth0_macvtap: left promiscuous mode [ 133.769781][ T11] veth1_vlan: left promiscuous mode [ 133.775193][ T11] veth0_vlan: left promiscuous mode [ 133.781380][ T11] veth1_macvtap: left promiscuous mode [ 133.786959][ T11] veth0_macvtap: left promiscuous mode [ 133.792520][ T11] veth1_vlan: left promiscuous mode [ 133.797840][ T11] veth0_vlan: left promiscuous mode [ 133.952559][ T11] team0 (unregistering): Port device team_slave_1 removed [ 133.965028][ T11] team0 (unregistering): Port device team_slave_0 removed [ 134.040137][ T11] team0 (unregistering): Port device team_slave_1 removed [ 134.052081][ T11] team0 (unregistering): Port device team_slave_0 removed [ 134.123628][ T8291] veth0_vlan: entered promiscuous mode [ 134.143672][ T8291] veth1_vlan: entered promiscuous mode [ 134.153101][ T8310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.170016][ T8291] veth0_macvtap: entered promiscuous mode [ 134.204979][ T8338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.213575][ T8338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.222573][ T8338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.234029][ T8291] veth1_macvtap: entered promiscuous mode [ 134.247249][ T8338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.275373][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.285979][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.297662][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.320542][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.331062][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.343216][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.359212][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.372817][ T8291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.381589][ T8291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.390410][ T8291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.399382][ T8291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.419719][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.428210][ T8310] veth0_vlan: entered promiscuous mode [ 134.435480][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 134.435493][ T29] audit: type=1326 audit(1719489081.695:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.0.1606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5001b8db29 code=0x0 [ 134.473915][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.481037][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.492207][ T8310] veth1_vlan: entered promiscuous mode [ 134.504388][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.511457][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.548302][ T8310] veth0_macvtap: entered promiscuous mode [ 134.574832][ T8310] veth1_macvtap: entered promiscuous mode [ 134.590518][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1608'. [ 134.601258][ T8409] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 134.631701][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.644090][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.654600][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.664478][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.674928][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.686118][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.688638][ T8415] loop2: detected capacity change from 0 to 512 [ 134.694603][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.710156][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.710185][ T8310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.710196][ T8310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.711200][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.755277][ T8415] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 134.769826][ T8415] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1610: invalid indirect mapped block 1 (level 1) [ 134.786134][ T8415] EXT4-fs (loop2): 1 truncate cleaned up [ 134.792152][ T8415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.792168][ T8310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.812915][ T8310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.821622][ T8310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.830378][ T8310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.851204][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.917518][ T8338] veth0_vlan: entered promiscuous mode [ 134.927510][ T8338] veth1_vlan: entered promiscuous mode [ 134.943505][ T8338] veth0_macvtap: entered promiscuous mode [ 134.951260][ T8338] veth1_macvtap: entered promiscuous mode [ 134.964307][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.974814][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.984664][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.995124][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.004993][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.015410][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.028239][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.040128][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.050719][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.060636][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.071115][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.081073][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.091504][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.103135][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.113525][ T8338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.122493][ T8338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.131291][ T8338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.140063][ T8338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.193536][ T8447] loop4: detected capacity change from 0 to 512 [ 135.216008][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.228719][ T8447] ext4 filesystem being mounted at /root/syzkaller.k09Y7U/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.250061][ T8338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.340623][ T8452] loop0: detected capacity change from 0 to 1024 [ 135.348659][ T8452] EXT4-fs: Ignoring removed orlov option [ 135.354593][ T8452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.431991][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 135.461060][ T8456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1616'. [ 135.542496][ T8469] loop0: detected capacity change from 0 to 128 [ 135.579811][ T29] audit: type=1326 audit(1719489082.835:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.3.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89c2371b29 code=0x0 [ 135.703706][ T29] audit: type=1326 audit(1719489082.955:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.3.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89c2371b29 code=0x0 [ 135.756907][ T8474] loop2: detected capacity change from 0 to 512 [ 135.766539][ T8474] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #17: comm syz.2.1622: iget: bogus i_mode (0) [ 135.779594][ T8474] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1622: couldn't read orphan inode 17 (err -117) [ 135.793556][ T8474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.809795][ T8474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1622: bg 0: block 7: invalid block bitmap [ 135.829579][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.073984][ T29] audit: type=1400 audit(1719489083.325:2594): avc: denied { setopt } for pid=8480 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.095730][ T29] audit: type=1326 audit(1719489083.355:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.2.1625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x0 [ 136.256774][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 136.265755][ T8492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.273207][ T8492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.283574][ T8492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.291195][ T8492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.314058][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1629'. [ 136.436672][ T8503] loop1: detected capacity change from 0 to 2048 [ 136.475111][ T8503] loop1: p1 < > p4 [ 136.479393][ T8503] loop1: p4 size 8388608 extends beyond EOD, truncated [ 136.488596][ T29] audit: type=1400 audit(1719489083.745:2596): avc: denied { read write } for pid=8502 comm="syz.1.1633" name="loop1p4" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.512301][ T29] audit: type=1400 audit(1719489083.745:2597): avc: denied { open } for pid=8502 comm="syz.1.1633" path="/dev/loop1p4" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.535682][ T29] audit: type=1400 audit(1719489083.745:2598): avc: denied { ioctl } for pid=8502 comm="syz.1.1633" path="/dev/loop1p4" dev="devtmpfs" ino=1000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.581307][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'. [ 136.590342][ T8511] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 136.668606][ T8514] loop0: detected capacity change from 0 to 1024 [ 136.678218][ T8514] EXT4-fs: Ignoring removed orlov option [ 136.683997][ T8514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.690877][ T29] audit: type=1400 audit(1719489083.945:2599): avc: denied { bind } for pid=8517 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.710727][ T29] audit: type=1400 audit(1719489083.945:2600): avc: denied { connect } for pid=8517 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.909205][ T8536] loop0: detected capacity change from 0 to 512 [ 136.988056][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1648'. [ 137.003949][ T8540] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 137.079247][ T8544] loop2: detected capacity change from 0 to 128 [ 137.087663][ T8544] FAT-fs (loop2): Unrecognized mount option "ÿÿÿ0xffffffffffffffff00000000000000000000000ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 137.353613][ T8559] loop3: detected capacity change from 0 to 256 [ 137.402912][ T8562] loop1: detected capacity change from 0 to 512 [ 137.473142][ T8569] loop3: detected capacity change from 0 to 512 [ 137.505463][ T8572] loop1: detected capacity change from 0 to 256 [ 137.512856][ T8572] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿÿ" or missing value [ 137.635715][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 137.722537][ T8597] loop2: detected capacity change from 0 to 512 [ 137.869651][ T8605] loop2: detected capacity change from 0 to 512 [ 137.887693][ T8605] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 137.902155][ T8605] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1669: invalid indirect mapped block 1 (level 1) [ 137.917032][ T8605] EXT4-fs (loop2): 1 truncate cleaned up [ 137.923097][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.369133][ T8616] loop1: detected capacity change from 0 to 512 [ 138.398140][ T8616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.410708][ T8616] ext4 filesystem being mounted at /root/syzkaller.XVgJ6j/23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.426432][ T8669] loop0: detected capacity change from 0 to 512 [ 138.444839][ T8310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.484843][ T8676] loop3: detected capacity change from 0 to 128 [ 138.507457][ T8679] loop1: detected capacity change from 0 to 128 [ 138.514953][ T8679] FAT-fs (loop1): Unrecognized mount option ">" or missing value [ 138.620913][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.972852][ T8706] loop2: detected capacity change from 0 to 512 [ 138.986025][ T8706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.999539][ T8706] ext4 filesystem being mounted at /root/syzkaller.Ap2OUZ/127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.019919][ T6982] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.070659][ T8710] IPVS: stopping master sync thread 8711 ... [ 139.076696][ T8711] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 139.354611][ T8735] loop3: detected capacity change from 0 to 512 [ 139.445477][ T29] kauditd_printk_skb: 1039 callbacks suppressed [ 139.445490][ T29] audit: type=1326 audit(1719489086.705:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.1699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89c2371b29 code=0x0 [ 139.704230][ T8759] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 139.713038][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 139.722014][ T8759] netlink: 'syz.0.1704': attribute type 15 has an invalid length. [ 139.733201][ T8759] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 139.742091][ T8759] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 139.750889][ T8759] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 139.759796][ T8759] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 139.770061][ T8759] vxlan0: entered promiscuous mode [ 140.043076][ T8767] loop4: detected capacity change from 0 to 1024 [ 140.051099][ T8767] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 140.061361][ T8767] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 140.076967][ T8310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 140.081936][ T8767] jbd2_journal_init_inode: Cannot locate journal superblock [ 140.087862][ T8310] CPU: 1 PID: 8310 Comm: syz-executor Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 140.087887][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.087898][ T8310] Call Trace: [ 140.087906][ T8310] [ 140.095226][ T8767] EXT4-fs (loop4): Could not load journal inode [ 140.106834][ T8310] dump_stack_lvl+0xf2/0x150 [ 140.106865][ T8310] dump_stack+0x15/0x20 [ 140.106887][ T8310] dump_header+0x83/0x2d0 [ 140.142405][ T8310] oom_kill_process+0x33e/0x4c0 [ 140.147250][ T8310] out_of_memory+0x9af/0xbe0 [ 140.151867][ T8310] mem_cgroup_out_of_memory+0x13e/0x190 [ 140.157414][ T8310] try_charge_memcg+0x745/0xcd0 [ 140.162259][ T8310] ? __alloc_pages_noprof+0x194/0x360 [ 140.167670][ T8310] ? __rcu_read_unlock+0x4e/0x70 [ 140.172605][ T8310] __mem_cgroup_charge+0x63/0x100 [ 140.177622][ T8310] filemap_add_folio+0x53/0x1b0 [ 140.182461][ T8310] __filemap_get_folio+0x2f1/0x5b0 [ 140.187604][ T8310] filemap_fault+0x3a7/0xa60 [ 140.192188][ T8310] __do_fault+0xb6/0x200 [ 140.196492][ T8310] handle_mm_fault+0xdeb/0x2a80 [ 140.201413][ T8310] ? mas_walk+0x204/0x320 [ 140.205750][ T8310] exc_page_fault+0x3b9/0x650 [ 140.210532][ T8310] asm_exc_page_fault+0x26/0x30 [ 140.215381][ T8310] RIP: 0033:0x7f937c02992f [ 140.219792][ T8310] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 b8 00 00 00 48 8b 05 74 ae de 00 48 69 8c 24 b0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 48 08 39 4c 24 0c 48 89 d0 4c 0f 45 ea 4c 29 f0 48 3b 05 59 ad [ 140.239514][ T8310] RSP: 002b:00007ffe0ee11a80 EFLAGS: 00010202 [ 140.245570][ T8310] RAX: 0000001b33120000 RBX: 0000000000000051 RCX: 00000000000222e0 [ 140.253552][ T8310] RDX: 000000000002231a RSI: 00007ffe0ee11b30 RDI: 0000000000000001 [ 140.261520][ T8310] RBP: 00007ffe0ee11acc R08: 000000000375111f R09: 7fffffffffffffff [ 140.269512][ T8310] R10: 00007f937c2b90b8 R11: 00007f937c2b9080 R12: 0000000000000032 [ 140.277556][ T8310] R13: 00000000000220f3 R14: 000000000002203b R15: 00007ffe0ee11b30 [ 140.285523][ T8310] [ 140.288892][ T8310] memory: usage 307200kB, limit 307200kB, failcnt 822 [ 140.295794][ T8310] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 140.303682][ T8310] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 140.310969][ T8310] Memory cgroup stats for /syz1: [ 140.311195][ T8310] cache 4096 [ 140.319426][ T8310] rss 0 [ 140.319432][ T8310] shmem 0 [ 140.319438][ T8310] mapped_file 0 [ 140.319444][ T8310] dirty 0 [ 140.319449][ T8310] writeback 0 [ 140.319518][ T8310] workingset_refault_anon 256 [ 140.339559][ T8310] workingset_refault_file 950 [ 140.344222][ T8310] swap 204800 [ 140.347499][ T8310] swapcached 0 [ 140.350841][ T8310] pgpgin 161581 [ 140.354315][ T8310] pgpgout 161580 [ 140.357872][ T8310] pgfault 213556 [ 140.361397][ T8310] pgmajfault 153 [ 140.364926][ T8310] inactive_anon 0 [ 140.368527][ T8310] active_anon 0 [ 140.371956][ T8310] inactive_file 4096 [ 140.375878][ T8310] active_file 0 [ 140.379344][ T8310] unevictable 0 [ 140.382821][ T8310] hierarchical_memory_limit 314572800 [ 140.388173][ T8310] hierarchical_memsw_limit 9223372036854771712 [ 140.394504][ T8310] total_cache 4096 [ 140.398355][ T8310] total_rss 0 [ 140.401674][ T8310] total_shmem 0 [ 140.405174][ T8310] total_mapped_file 0 [ 140.409149][ T8310] total_dirty 0 [ 140.412576][ T8310] total_writeback 0 [ 140.416375][ T8310] total_workingset_refault_anon 256 [ 140.421675][ T8310] total_workingset_refault_file 950 [ 140.426852][ T8310] total_swap 204800 [ 140.430628][ T8310] total_swapcached 0 [ 140.434575][ T8310] total_pgpgin 161581 [ 140.438575][ T8310] total_pgpgout 161580 [ 140.442705][ T8310] total_pgfault 213556 [ 140.446768][ T8310] total_pgmajfault 153 [ 140.450808][ T8310] total_inactive_anon 0 [ 140.454939][ T8310] total_active_anon 0 [ 140.458897][ T8310] total_inactive_file 4096 [ 140.463286][ T8310] total_active_file 0 [ 140.467264][ T8310] total_unevictable 0 [ 140.471215][ T8310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1696,pid=8732,uid=0 [ 140.486101][ T8310] Memory cgroup out of memory: Killed process 8732 (syz.1.1696) total-vm:82800kB, anon-rss:580kB, file-rss:9404kB, shmem-rss:128kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 140.533848][ T8732] ================================================================== [ 140.541958][ T8732] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 140.551787][ T8732] [ 140.554102][ T8732] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 0: [ 140.562157][ T8732] tick_do_update_jiffies64+0x112/0x1b0 [ 140.567709][ T8732] tick_nohz_handler+0x7c/0x2d0 [ 140.572564][ T8732] __hrtimer_run_queues+0x20d/0x5e0 [ 140.577765][ T8732] hrtimer_interrupt+0x210/0x7b0 [ 140.582702][ T8732] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 140.588594][ T8732] sysvec_apic_timer_interrupt+0x6e/0x80 [ 140.594217][ T8732] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.600190][ T8732] kcsan_setup_watchpoint+0x404/0x410 [ 140.605555][ T8732] __vmalloc_node_range_noprof+0xa25/0xef0 [ 140.611351][ T8732] kvmalloc_node_noprof+0x121/0x170 [ 140.616543][ T8732] ip_set_alloc+0x1f/0x30 [ 140.620868][ T8732] hash_netiface_create+0x273/0x730 [ 140.626064][ T8732] ip_set_create+0x359/0x8a0 [ 140.630649][ T8732] nfnetlink_rcv_msg+0x4a9/0x570 [ 140.635579][ T8732] netlink_rcv_skb+0x12c/0x230 [ 140.640336][ T8732] nfnetlink_rcv+0x16c/0x15b0 [ 140.645003][ T8732] netlink_unicast+0x58d/0x660 [ 140.649755][ T8732] netlink_sendmsg+0x5ca/0x6e0 [ 140.654518][ T8732] __sock_sendmsg+0x140/0x180 [ 140.659189][ T8732] ____sys_sendmsg+0x312/0x410 [ 140.663942][ T8732] __sys_sendmsg+0x1e9/0x280 [ 140.668523][ T8732] __x64_sys_sendmsg+0x46/0x50 [ 140.673277][ T8732] x64_sys_call+0xb25/0x2d70 [ 140.677858][ T8732] do_syscall_64+0xc9/0x1c0 [ 140.682354][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.688238][ T8732] [ 140.690544][ T8732] read to 0xffffffff860079c0 of 8 bytes by task 8732 on cpu 1: [ 140.698070][ T8732] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 140.704393][ T8732] count_shadow_nodes+0x6b/0x230 [ 140.709323][ T8732] do_shrink_slab+0x5a/0x690 [ 140.713910][ T8732] shrink_slab+0x4ed/0x860 [ 140.718320][ T8732] shrink_node+0xa0d/0x13c0 [ 140.722815][ T8732] do_try_to_free_pages+0x3c6/0xc50 [ 140.728002][ T8732] try_to_free_mem_cgroup_pages+0x1eb/0x4e0 [ 140.733885][ T8732] try_charge_memcg+0x27a/0xcd0 [ 140.738724][ T8732] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 140.744784][ T8732] __read_swap_cache_async+0x2b9/0x520 [ 140.750237][ T8732] swap_cluster_readahead+0x276/0x3f0 [ 140.755601][ T8732] swapin_readahead+0xe2/0x7a0 [ 140.760358][ T8732] do_swap_page+0x3bc/0x1840 [ 140.764940][ T8732] handle_mm_fault+0x809/0x2a80 [ 140.769871][ T8732] exc_page_fault+0x3b9/0x650 [ 140.774567][ T8732] asm_exc_page_fault+0x26/0x30 [ 140.779409][ T8732] [ 140.781719][ T8732] value changed: 0x00000000ffffc185 -> 0x00000000ffffc186 [ 140.788808][ T8732] [ 140.791112][ T8732] Reported by Kernel Concurrency Sanitizer on: [ 140.797243][ T8732] CPU: 1 PID: 8732 Comm: syz.1.1696 Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 140.808769][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.818814][ T8732] ================================================================== [ 140.833238][ T29] audit: type=1326 audit(1719489088.085:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 140.856814][ T8772] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 1460112098 > max in inode 2040 [ 140.902605][ T29] audit: type=1326 audit(1719489088.115:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 140.926046][ T29] audit: type=1326 audit(1719489088.115:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 140.949577][ T29] audit: type=1326 audit(1719489088.115:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 140.973135][ T29] audit: type=1326 audit(1719489088.135:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 140.996621][ T29] audit: type=1326 audit(1719489088.135:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 141.020049][ T29] audit: type=1326 audit(1719489088.145:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed736bb29 code=0x7ffc0000 [ 141.044063][ T29] audit: type=1326 audit(1719489088.145:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ed7362ba7 code=0x7ffc0000 [ 141.067549][ T29] audit: type=1326 audit(1719489088.145:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ed7307559 code=0x7ffc0000 [ 141.099108][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'.