last executing test programs: 8.609230295s ago: executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) syz_io_uring_setup(0x5b3f, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x6, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r1, 0x0, &(0x7f0000000000)='id:cb2e') keyctl$negate(0xd, 0x0, 0x9, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) keyctl$get_security(0x11, 0x0, &(0x7f0000000540)=""/4096, 0x1000) add_key(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) 8.522929939s ago: executing program 3: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xe0028008}) 8.501600692s ago: executing program 4: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x19, r1, 0x0, 0x0) 8.467401748s ago: executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r1, 0x2) fcntl$lock(r1, 0x25, &(0x7f0000000740)={0x1}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.440638292s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8}, 0x90) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4205, r1, 0x202, &(0x7f0000000000)) 3.021595481s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000013c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0xfff, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xffffffffffffff1f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x14, 0x941f00a0, &(0x7f0000000100)="b9ff03076044238cb89e14f00800", 0x0, 0xbdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000300)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@grpid}]}, 0x1, 0x4a3, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x737f0c77864bf3b9, 0x0) write$nci(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="6679f6943bdeeb0d8f4be6bda75cef2d520800af860c842d463b730341b4e047bf400ca56734a6def5b08b1c85e07d67dc70f7747d90c4b76341a46d684415e7135e47ae57a1d7c5b2a1fb4f382b4c3b"], 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="0380c20000000000000000000800450000380000000000019078ac1ee600ac1414aa03049078120003282500400000000000000100007f000001ac14140f0000b508000000c9fa050500000000000000c08ed1e49e060105a0cd00791ce5b181d527f4673c00"/115], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6300}, {0x85, 0x0, 0x0, 0x32}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000000000000005100080000009500000000000000000016080cee77d5fb742f49a77fae76630d905303f8ea3cbb7afddf42651bfc5064e4aea4731fcba9a7887060dbb180d0d0901519c025b6ea2d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 2.77557435s ago: executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstatfs(0xffffffffffffffff, 0x0) 2.559984834s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 2.536309038s ago: executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$9p(r1, &(0x7f0000000280)="5c8fd005d17ffbbd361bd90cef940093948f97b4c4a3c9772aa63518934697124c323703b5f92e401407b6b7620e61b19c884b5e99f8bbe1af626ab06b969bb261c47b8eaad213ae516013e7", 0x4c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) 2.518284701s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/3143], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights, @rights, @rights], 0x18}, 0x2000) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r1}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.486103326s ago: executing program 2: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r8], 0x20}, 0x1, 0x6}, 0x0) 485.905083ms ago: executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket(0x11, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 'tunl0\x00'}}, 0x1e) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="24e7dd707186717bbde8000000430001000000000000000000000000000e000100275c27"], 0x24}}, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'caif0\x00'}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@local}}]}, 0x154}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$binfmt_script(r3, &(0x7f0000000080), 0xffffff85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x6611) 280.791686ms ago: executing program 1: r0 = socket(0x10, 0x2, 0x0) ioperm(0x0, 0x6, 0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 265.798758ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 172.213743ms ago: executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) fchmod(r0, 0x0) 166.357724ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28}, 0x20) 158.763765ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) 151.675196ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f00000007c0)={[{@grpquota}, {@nolazytime}, {@resuid={'resuid', 0x3d, 0xee00}}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r3 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r3, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000000)=""/269, 0xfffffdef) r4 = openat(r2, &(0x7f0000000240)='./file1\x00', 0x202000, 0x0) fchown(r4, 0x0, 0xee01) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x1c, {0x2, 0x4e22, @remote}, 'bond_slave_0\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="000800030002000000080001000000000008000300040000000800010001000000080003000100000089ca2951c27252ef6c0c15b3387d3638b70e0c222dfb33131e22de650ad459f29500"/88], 0x40}}, 0x20008800) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x22000426, &(0x7f0000000480)={[], [], 0x2c}, 0x84, 0x4c0, &(0x7f0000001800)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) getdents64(r8, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x71, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='pimreg1\x00', 0x5, 0x8, 0x4b8}) fadvise64(r8, 0x0, 0x0, 0x1) getpid() 143.653647ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x90) 130.84936ms ago: executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, 0x0, 0x20000009, 0x0) 118.035721ms ago: executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020c31a00fea1000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xd, 0x0, &(0x7f0000000040)="972d4e595a34093f61ef69956c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_CAPBSET_DROP(0x18, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000101, 0x91, 0xf0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00080003005c00000000002f9078000000547c6db7d1c74e0e8ae8ee9da9f100e000000124808100000200007f1a100008000000000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x90) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 62.97461ms ago: executing program 1: ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x2, 0x0) 0s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0, 0x2}, 0x20) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 11.197345][ T2799] udevd (2799) used greatest stack depth: 11936 bytes left [ 14.604857][ T2949] sed (2949) used greatest stack depth: 11336 bytes left [ 14.852501][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 14.852515][ T29] audit: type=1400 audit(1718683013.011:76): avc: denied { transition } for pid=2965 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.880810][ T29] audit: type=1400 audit(1718683013.011:77): avc: denied { noatsecure } for pid=2965 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.899974][ T29] audit: type=1400 audit(1718683013.011:78): avc: denied { write } for pid=2965 comm="sh" path="pipe:[633]" dev="pipefs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.922046][ T29] audit: type=1400 audit(1718683013.011:79): avc: denied { rlimitinh } for pid=2965 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.941330][ T29] audit: type=1400 audit(1718683013.011:80): avc: denied { siginh } for pid=2965 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.815379][ T29] audit: type=1400 audit(1718683016.971:81): avc: denied { read } for pid=2769 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts. 2024/06/18 03:57:00 fuzzer started 2024/06/18 03:57:00 dialing manager at 10.128.0.163:30030 [ 22.048616][ T29] audit: type=1400 audit(1718683020.201:82): avc: denied { node_bind } for pid=3077 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.069790][ T29] audit: type=1400 audit(1718683020.201:83): avc: denied { name_bind } for pid=3077 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 22.126841][ T29] audit: type=1400 audit(1718683020.281:84): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.136631][ T3085] cgroup: Unknown subsys name 'net' [ 22.151723][ T29] audit: type=1400 audit(1718683020.281:85): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.180344][ T29] audit: type=1400 audit(1718683020.291:86): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.203098][ T29] audit: type=1400 audit(1718683020.291:87): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.225285][ T29] audit: type=1400 audit(1718683020.311:88): avc: denied { create } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.232438][ T3088] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.246048][ T29] audit: type=1400 audit(1718683020.311:89): avc: denied { write } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.275233][ T29] audit: type=1400 audit(1718683020.321:90): avc: denied { read } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.295598][ T29] audit: type=1400 audit(1718683020.321:91): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.319729][ T3087] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.434649][ T3085] cgroup: Unknown subsys name 'rlimit' 2024/06/18 03:57:00 suppressing KCSAN reports in functions: '__xa_clear_mark' 'ext4_free_inodes_count' 2024/06/18 03:57:00 starting 5 executor processes [ 23.110972][ T3117] chnl_net:caif_netlink_parms(): no params data found [ 23.127700][ T3120] chnl_net:caif_netlink_parms(): no params data found [ 23.162706][ T3105] chnl_net:caif_netlink_parms(): no params data found [ 23.186035][ T3107] chnl_net:caif_netlink_parms(): no params data found [ 23.234778][ T3117] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.241909][ T3117] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.249036][ T3117] bridge_slave_0: entered allmulticast mode [ 23.255629][ T3117] bridge_slave_0: entered promiscuous mode [ 23.262452][ T3117] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.269554][ T3117] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.276693][ T3117] bridge_slave_1: entered allmulticast mode [ 23.283040][ T3117] bridge_slave_1: entered promiscuous mode [ 23.298304][ T3120] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305468][ T3120] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.312635][ T3120] bridge_slave_0: entered allmulticast mode [ 23.319016][ T3120] bridge_slave_0: entered promiscuous mode [ 23.325667][ T3120] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.332744][ T3120] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.339902][ T3120] bridge_slave_1: entered allmulticast mode [ 23.347491][ T3120] bridge_slave_1: entered promiscuous mode [ 23.372470][ T3117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.388892][ T3120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.404609][ T3117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.426559][ T3115] chnl_net:caif_netlink_parms(): no params data found [ 23.435603][ T3120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.451670][ T3107] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.458833][ T3107] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.466080][ T3107] bridge_slave_0: entered allmulticast mode [ 23.472457][ T3107] bridge_slave_0: entered promiscuous mode [ 23.478844][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.486035][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.493316][ T3105] bridge_slave_0: entered allmulticast mode [ 23.499646][ T3105] bridge_slave_0: entered promiscuous mode [ 23.520820][ T3107] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.528017][ T3107] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.535375][ T3107] bridge_slave_1: entered allmulticast mode [ 23.541895][ T3107] bridge_slave_1: entered promiscuous mode [ 23.548068][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.555215][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.562442][ T3105] bridge_slave_1: entered allmulticast mode [ 23.568819][ T3105] bridge_slave_1: entered promiscuous mode [ 23.575444][ T3120] team0: Port device team_slave_0 added [ 23.590109][ T3117] team0: Port device team_slave_0 added [ 23.600666][ T3120] team0: Port device team_slave_1 added [ 23.616396][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.628178][ T3117] team0: Port device team_slave_1 added [ 23.639176][ T3107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.653319][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.662808][ T3120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.669746][ T3120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.695732][ T3120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.708874][ T3120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.715842][ T3120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.742243][ T3120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.761961][ T3107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.780592][ T3117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.787613][ T3117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.813889][ T3117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.825195][ T3117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.832262][ T3117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.858417][ T3117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.888648][ T3115] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.895818][ T3115] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.902918][ T3115] bridge_slave_0: entered allmulticast mode [ 23.909208][ T3115] bridge_slave_0: entered promiscuous mode [ 23.921080][ T3105] team0: Port device team_slave_0 added [ 23.927403][ T3105] team0: Port device team_slave_1 added [ 23.943857][ T3115] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.951048][ T3115] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.958260][ T3115] bridge_slave_1: entered allmulticast mode [ 23.964655][ T3115] bridge_slave_1: entered promiscuous mode [ 23.971451][ T3107] team0: Port device team_slave_0 added [ 23.986919][ T3105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.993932][ T3105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.019859][ T3105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.039831][ T3107] team0: Port device team_slave_1 added [ 24.047275][ T3120] hsr_slave_0: entered promiscuous mode [ 24.053618][ T3120] hsr_slave_1: entered promiscuous mode [ 24.059909][ T3105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.066929][ T3105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.093787][ T3105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.121904][ T3117] hsr_slave_0: entered promiscuous mode [ 24.127844][ T3117] hsr_slave_1: entered promiscuous mode [ 24.133663][ T3117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.141194][ T3117] Cannot create hsr debugfs directory [ 24.157589][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.167775][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.181250][ T3107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.188270][ T3107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.214237][ T3107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.227482][ T3107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.234529][ T3107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.260526][ T3107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.295627][ T3115] team0: Port device team_slave_0 added [ 24.315168][ T3115] team0: Port device team_slave_1 added [ 24.322684][ T3105] hsr_slave_0: entered promiscuous mode [ 24.328604][ T3105] hsr_slave_1: entered promiscuous mode [ 24.334702][ T3105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.342547][ T3105] Cannot create hsr debugfs directory [ 24.370120][ T3115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.377117][ T3115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.403312][ T3115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.416398][ T3115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.424260][ T3115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.450194][ T3115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.462897][ T3107] hsr_slave_0: entered promiscuous mode [ 24.469161][ T3107] hsr_slave_1: entered promiscuous mode [ 24.474936][ T3107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.482591][ T3107] Cannot create hsr debugfs directory [ 24.553532][ T3115] hsr_slave_0: entered promiscuous mode [ 24.559455][ T3115] hsr_slave_1: entered promiscuous mode [ 24.565328][ T3115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.573158][ T3115] Cannot create hsr debugfs directory [ 24.693434][ T3120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.704223][ T3120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.714851][ T3120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.723811][ T3120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.732836][ T3105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.741102][ T3105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.749851][ T3105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.758660][ T3105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.783885][ T3107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.799114][ T3107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.807940][ T3107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.816694][ T3107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.845284][ T3117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.854015][ T3117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.878453][ T3115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.886921][ T3117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.896842][ T3117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.911386][ T3115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.922594][ T3115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.935757][ T3115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.962362][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.985880][ T3105] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.018649][ T3120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.026891][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.034115][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.043371][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.050466][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.068967][ T3120] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.087333][ T3107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.097248][ T3105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.113851][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.121020][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.144984][ T3117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.154767][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.161850][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.172608][ T3107] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.187537][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.195031][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.213354][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.220436][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.233172][ T3117] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.250203][ T3105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.264515][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.271749][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.286556][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.293721][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.336521][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.358303][ T3115] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.377966][ T3115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.388518][ T3115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.402032][ T3107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.412491][ T3107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.433384][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.440533][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.449447][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.456565][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.485275][ T3120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.520589][ T3117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.560531][ T3115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.571986][ T3105] veth0_vlan: entered promiscuous mode [ 25.579804][ T3105] veth1_vlan: entered promiscuous mode [ 25.606294][ T3107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.616870][ T3105] veth0_macvtap: entered promiscuous mode [ 25.629032][ T3105] veth1_macvtap: entered promiscuous mode [ 25.667721][ T3105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.693344][ T3120] veth0_vlan: entered promiscuous mode [ 25.699694][ T3105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.732119][ T3105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.741116][ T3105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.749947][ T3105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.758777][ T3105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.769311][ T3120] veth1_vlan: entered promiscuous mode [ 25.804424][ T3115] veth0_vlan: entered promiscuous mode [ 25.820239][ T3107] veth0_vlan: entered promiscuous mode [ 25.830214][ T3120] veth0_macvtap: entered promiscuous mode [ 25.858576][ T3120] veth1_macvtap: entered promiscuous mode [ 25.871533][ T3115] veth1_vlan: entered promiscuous mode [ 25.883714][ T3248] loop1: detected capacity change from 0 to 1024 [ 25.884380][ T3117] veth0_vlan: entered promiscuous mode [ 25.901142][ T3107] veth1_vlan: entered promiscuous mode [ 25.911244][ T3117] veth1_vlan: entered promiscuous mode [ 25.920296][ T3120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.930825][ T3120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.941481][ T3120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.953060][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 25.960371][ T3107] veth0_macvtap: entered promiscuous mode [ 25.975821][ T3120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.986306][ T3120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.998220][ T3120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.008416][ T3248] loop1: detected capacity change from 0 to 128 [ 26.012146][ T3115] veth0_macvtap: entered promiscuous mode [ 26.023470][ T3120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.032314][ T3120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.041183][ T3120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.050105][ T3120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.062419][ T3117] veth0_macvtap: entered promiscuous mode [ 26.073294][ T3107] veth1_macvtap: entered promiscuous mode [ 26.082302][ T3115] veth1_macvtap: entered promiscuous mode [ 26.091043][ T3117] veth1_macvtap: entered promiscuous mode [ 26.115513][ T3115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.126112][ T3115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.136002][ T3115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.146632][ T3115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.162164][ T3115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.182091][ T3107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.192755][ T3107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.202912][ T3107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.213581][ T3107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.223738][ T3107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.234223][ T3107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.250294][ T3107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.258879][ T3107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.269406][ T3107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.279584][ T3107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.290159][ T3107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.303678][ T3107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.311829][ T3115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.322369][ T3115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.332221][ T3115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.342761][ T3115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.352677][ T3115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.363356][ T3115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.374724][ T3115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.383374][ T3115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.392234][ T3115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.400919][ T3115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.409910][ T3115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.428499][ T3107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.437380][ T3107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.446124][ T3107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.455078][ T3107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.479809][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.490488][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.500307][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.510728][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.520889][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.531356][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.541365][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.551858][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.563957][ T3117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.594370][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.605831][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.615739][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.626353][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.635381][ T3267] loop2: detected capacity change from 0 to 128 [ 26.636196][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.652903][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.662945][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.673539][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.686274][ T3267] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 26.698946][ T3267] ext4 filesystem being mounted at /root/syzkaller-testdir2108079903/syzkaller.M7jK5s/1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.699113][ T3117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.724353][ T3117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.733361][ T3117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.742277][ T3117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.743668][ T3270] loop1: detected capacity change from 0 to 256 [ 26.750980][ T3117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.764027][ T3272] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 26.781618][ T3115] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 26.829056][ T3270] loop1: detected capacity change from 0 to 8192 [ 26.890122][ T3281] loop2: detected capacity change from 0 to 512 [ 26.899764][ T3281] journal_path: Lookup failure for './file0' [ 26.905979][ T3281] EXT4-fs: error: could not find journal device path [ 26.994777][ T3296] mmap: syz-executor.2 (3296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.146495][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 27.146505][ T29] audit: type=1400 audit(1718683025.301:301): avc: denied { read } for pid=3302 comm="syz-executor.1" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.407806][ T3314] loop2: detected capacity change from 0 to 128 [ 27.662418][ T29] audit: type=1400 audit(1718683025.821:302): avc: denied { setopt } for pid=3323 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.682559][ T29] audit: type=1400 audit(1718683025.821:303): avc: denied { write } for pid=3323 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.718595][ T3326] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 27.989409][ T29] audit: type=1326 audit(1718683026.141:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2370581f29 code=0x0 [ 28.094306][ T3342] loop1: detected capacity change from 0 to 128 [ 28.531428][ T3367] loop1: detected capacity change from 0 to 1024 [ 28.565313][ T3368] loop2: detected capacity change from 0 to 256 [ 28.566636][ T3367] loop1: detected capacity change from 0 to 128 [ 28.634718][ T3370] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 28.643604][ T3368] loop2: detected capacity change from 0 to 8192 [ 28.657267][ T3372] loop1: detected capacity change from 0 to 128 [ 28.949936][ T3396] loop1: detected capacity change from 0 to 1024 [ 29.007183][ T3396] loop1: detected capacity change from 0 to 128 [ 29.020797][ T3398] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 29.039784][ T3400] loop2: detected capacity change from 0 to 128 [ 29.073293][ T29] audit: type=1326 audit(1718683027.231:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3401 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe347e3df29 code=0x0 [ 29.325451][ T29] audit: type=1400 audit(1718683027.481:306): avc: denied { read } for pid=3418 comm="syz-executor.2" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.347072][ T29] audit: type=1400 audit(1718683027.481:307): avc: denied { open } for pid=3418 comm="syz-executor.2" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.428719][ T3418] chnl_net:caif_netlink_parms(): no params data found [ 29.460258][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.467477][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.474810][ T3418] bridge_slave_0: entered allmulticast mode [ 29.481159][ T3418] bridge_slave_0: entered promiscuous mode [ 29.488220][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.495393][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.502643][ T3418] bridge_slave_1: entered allmulticast mode [ 29.508920][ T3418] bridge_slave_1: entered promiscuous mode [ 29.525062][ T3418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.535619][ T3418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.553036][ T3418] team0: Port device team_slave_0 added [ 29.559366][ T3418] team0: Port device team_slave_1 added [ 29.573248][ T3418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.580270][ T3418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.606189][ T3418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.617438][ T3418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.624413][ T3418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.650518][ T3418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.674480][ T3418] hsr_slave_0: entered promiscuous mode [ 29.675513][ T3432] loop1: detected capacity change from 0 to 256 [ 29.687405][ T3418] hsr_slave_1: entered promiscuous mode [ 29.693463][ T3418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.701088][ T3418] Cannot create hsr debugfs directory [ 29.755775][ T3432] loop1: detected capacity change from 0 to 8192 [ 29.763439][ T3418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.924778][ T3297] syz-executor.0 (3297) used greatest stack depth: 10872 bytes left [ 29.983183][ T29] audit: type=1326 audit(1718683028.141:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b519f29 code=0x7ffc0000 [ 30.011486][ T29] audit: type=1326 audit(1718683028.141:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b519f29 code=0x7ffc0000 [ 30.035511][ T29] audit: type=1326 audit(1718683028.141:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3440 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63b519f29 code=0x7ffc0000 [ 30.040903][ T3443] loop1: detected capacity change from 0 to 128 [ 30.158008][ T3447] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 30.173344][ T3447] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 30.182538][ T3447] team0: Failed to send options change via netlink (err -105) [ 30.190080][ T3447] team0: Port device netdevsim1 added [ 30.201358][ T3447] syz-executor.1 (3447) used greatest stack depth: 10728 bytes left [ 30.549906][ T3463] syz-executor.1 (3463) used greatest stack depth: 10344 bytes left [ 30.559742][ T3465] loop1: detected capacity change from 0 to 128 [ 30.568898][ T3465] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.581685][ T3465] ext4 filesystem being mounted at /root/syzkaller-testdir892379588/syzkaller.ylQgaA/32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.604726][ T3105] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.648805][ T3469] loop1: detected capacity change from 0 to 512 [ 30.656069][ T3469] journal_path: Lookup failure for './file0' [ 30.662067][ T3469] EXT4-fs: error: could not find journal device path [ 30.849286][ T3475] loop0: detected capacity change from 0 to 256 [ 30.924981][ T3475] loop0: detected capacity change from 0 to 8192 [ 31.004485][ T3482] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 31.029205][ T3486] loop1: detected capacity change from 0 to 128 [ 31.189529][ T3493] bond0: (slave bond_slave_1): Releasing backup interface [ 31.237169][ T3418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.301840][ T3418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.368657][ T3418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.385196][ T3499] loop0: detected capacity change from 0 to 128 [ 31.394916][ T3499] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.407266][ T3499] ext4 filesystem being mounted at /root/syzkaller-testdir493783711/syzkaller.uYJepg/15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.432167][ T3120] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.456574][ T3418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.466041][ T3418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.475775][ T3418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.485314][ T3418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.500932][ T3503] loop0: detected capacity change from 0 to 512 [ 31.508438][ T3503] journal_path: Lookup failure for './file0' [ 31.514480][ T3503] EXT4-fs: error: could not find journal device path [ 31.543961][ T3418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.558213][ T3418] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.573609][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.580742][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.627427][ T3418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.638126][ T3418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.651740][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.658974][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.707355][ T3418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.785048][ T3418] veth0_vlan: entered promiscuous mode [ 31.793908][ T3418] veth1_vlan: entered promiscuous mode [ 31.812212][ T3418] veth0_macvtap: entered promiscuous mode [ 31.819954][ T3418] veth1_macvtap: entered promiscuous mode [ 31.831049][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.841598][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.851488][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.862100][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.872117][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.882859][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.892859][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.903470][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.913384][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.923970][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.935994][ T3418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.946935][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.958165][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.968053][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.978626][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.988466][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.998907][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.000916][ T3530] loop1: detected capacity change from 0 to 128 [ 32.008841][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.025603][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.035485][ T3418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.046011][ T3418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.058657][ T3418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.066339][ T3526] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 32.086988][ T3526] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 32.097593][ T3526] team0: Failed to send options change via netlink (err -105) [ 32.105261][ T3526] team0: Port device netdevsim1 added [ 32.114457][ T9] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 32.125954][ T3418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.134872][ T3418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.143588][ T3418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.152341][ T3418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.161061][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 32.161072][ T29] audit: type=1400 audit(1718683030.301:653): avc: denied { bind } for pid=3533 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.269973][ T3544] loop2: detected capacity change from 0 to 128 [ 32.279631][ T3544] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.293776][ T3544] ext4 filesystem being mounted at /root/syzkaller-testdir1186556133/syzkaller.hjhw4p/1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.321293][ T3418] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.385260][ T3553] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.386704][ T3550] loop2: detected capacity change from 0 to 512 [ 32.407837][ T3550] journal_path: Lookup failure for './file0' [ 32.408466][ T3553] loop0: detected capacity change from 0 to 1024 [ 32.413889][ T3550] EXT4-fs: error: could not find journal device path [ 32.421902][ T3553] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.437805][ T3553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.455841][ T29] audit: type=1400 audit(1718683030.611:654): avc: denied { append } for pid=3551 comm="syz-executor.0" path="/root/syzkaller-testdir493783711/syzkaller.uYJepg/23/file1/memory.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.484945][ T29] audit: type=1400 audit(1718683030.611:655): avc: denied { ioctl } for pid=3551 comm="syz-executor.0" path="/root/syzkaller-testdir493783711/syzkaller.uYJepg/23/file1/memory.current" dev="loop0" ino=18 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.514582][ T29] audit: type=1400 audit(1718683030.611:656): avc: denied { ioctl } for pid=3551 comm="syz-executor.0" path="socket:[5389]" dev="sockfs" ino=5389 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.588895][ T3120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.816704][ T3566] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 32.849121][ T3576] loop0: detected capacity change from 0 to 128 [ 32.860366][ T3579] loop1: detected capacity change from 0 to 128 [ 32.887719][ T3579] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.900183][ T3579] ext4 filesystem being mounted at /root/syzkaller-testdir892379588/syzkaller.ylQgaA/47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.934810][ T3105] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.045913][ T3587] loop1: detected capacity change from 0 to 512 [ 33.053339][ T3587] journal_path: Lookup failure for './file0' [ 33.059313][ T3587] EXT4-fs: error: could not find journal device path [ 33.081523][ T3589] loop0: detected capacity change from 0 to 1024 [ 33.089405][ T3589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.100767][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.151669][ T3120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.523957][ T3616] loop0: detected capacity change from 0 to 128 [ 33.564593][ T3618] loop1: detected capacity change from 0 to 512 [ 33.572188][ T3618] journal_path: Lookup failure for './file0' [ 33.578273][ T3618] EXT4-fs: error: could not find journal device path [ 33.669714][ T3622] loop1: detected capacity change from 0 to 1024 [ 33.678217][ T3622] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.689989][ T3622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.718409][ T29] audit: type=1400 audit(1718683031.871:657): avc: denied { read } for pid=3624 comm="syz-executor.0" name="/" dev="configfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.740934][ T29] audit: type=1400 audit(1718683031.871:658): avc: denied { open } for pid=3624 comm="syz-executor.0" path="/sys/kernel/config" dev="configfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.765426][ T29] audit: type=1400 audit(1718683031.871:659): avc: denied { setattr } for pid=3624 comm="syz-executor.0" name="/" dev="configfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.806671][ T3105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.054646][ T3648] loop1: detected capacity change from 0 to 512 [ 34.063303][ T3648] journal_path: Lookup failure for './file0' [ 34.069314][ T3648] EXT4-fs: error: could not find journal device path [ 34.109665][ T3650] loop0: detected capacity change from 0 to 128 [ 34.157514][ T3656] loop1: detected capacity change from 0 to 1024 [ 34.165645][ T3656] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.176621][ T3656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.229794][ T3105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.316503][ T29] audit: type=1400 audit(1718683032.471:660): avc: denied { connect } for pid=3672 comm="syz-executor.1" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.337339][ T29] audit: type=1400 audit(1718683032.491:661): avc: denied { bind } for pid=3672 comm="syz-executor.1" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.358021][ T29] audit: type=1400 audit(1718683032.491:662): avc: denied { node_bind } for pid=3672 comm="syz-executor.1" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 34.477765][ T3685] loop0: detected capacity change from 0 to 1024 [ 34.487435][ T3685] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.499470][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.550447][ T3120] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.627520][ T3689] loop0: detected capacity change from 0 to 128 [ 34.858372][ T3714] loop1: detected capacity change from 0 to 1024 [ 34.867389][ T3714] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.877999][ T3714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.945431][ T3105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.204539][ T3744] loop1: detected capacity change from 0 to 1024 [ 35.212759][ T3744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.224377][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.280701][ T3105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.350487][ T3752] ================================================================== [ 35.358591][ T3752] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 35.365880][ T3752] [ 35.368190][ T3752] read-write to 0xffff8881128a1478 of 8 bytes by task 3755 on cpu 1: [ 35.376245][ T3752] xas_init_marks+0x17e/0x320 [ 35.380924][ T3752] xas_store+0x213/0xc90 [ 35.385165][ T3752] delete_from_page_cache_batch+0x31d/0x710 [ 35.391057][ T3752] truncate_inode_pages_range+0x1c5/0x6b0 [ 35.396779][ T3752] truncate_pagecache+0x53/0x70 [ 35.401623][ T3752] ext4_setattr+0xa07/0xeb0 [ 35.406134][ T3752] notify_change+0x814/0x8a0 [ 35.410801][ T3752] do_truncate+0x116/0x160 [ 35.415214][ T3752] path_openat+0x1a20/0x1da0 [ 35.419794][ T3752] do_filp_open+0xf7/0x200 [ 35.424285][ T3752] do_sys_openat2+0xab/0x120 [ 35.428861][ T3752] __x64_sys_openat+0xf3/0x120 [ 35.433611][ T3752] x64_sys_call+0x1057/0x2d70 [ 35.438279][ T3752] do_syscall_64+0xc9/0x1c0 [ 35.442770][ T3752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.448662][ T3752] [ 35.450970][ T3752] read to 0xffff8881128a1478 of 8 bytes by task 3752 on cpu 0: [ 35.458496][ T3752] xas_find_marked+0x216/0x660 [ 35.463252][ T3752] find_get_entry+0x5d/0x290 [ 35.467918][ T3752] filemap_get_folios_tag+0x136/0x210 [ 35.473280][ T3752] mpage_prepare_extent_to_map+0x329/0xb80 [ 35.479177][ T3752] ext4_do_writepages+0xa20/0x2110 [ 35.484716][ T3752] ext4_writepages+0x159/0x2e0 [ 35.489469][ T3752] do_writepages+0x1d8/0x480 [ 35.494065][ T3752] filemap_fdatawrite_wbc+0xdb/0x100 [ 35.499344][ T3752] filemap_write_and_wait_range+0xb6/0x1f0 [ 35.505166][ T3752] ext4_punch_hole+0xc5/0x7e0 [ 35.509836][ T3752] ext4_fallocate+0x209/0x1190 [ 35.514676][ T3752] vfs_fallocate+0x380/0x3e0 [ 35.519259][ T3752] do_vfs_ioctl+0x1481/0x1560 [ 35.523926][ T3752] __se_sys_ioctl+0x81/0x150 [ 35.528505][ T3752] __x64_sys_ioctl+0x43/0x50 [ 35.533082][ T3752] x64_sys_call+0x1581/0x2d70 [ 35.537754][ T3752] do_syscall_64+0xc9/0x1c0 [ 35.542242][ T3752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.548216][ T3752] 2024/06/18 03:57:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 35.550529][ T3752] value changed: 0xffffffffffffffff -> 0xfffffffffffffe00 [ 35.557620][ T3752] [ 35.559923][ T3752] Reported by Kernel Concurrency Sanitizer on: [ 35.566062][ T3752] CPU: 0 PID: 3752 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 35.576464][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 35.586517][ T3752] ================================================================== [ 35.664052][ T3752] syz-executor.0 (3752) used greatest stack depth: 9800 bytes left