last executing test programs: 6.264696198s ago: executing program 3 (id=8207): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2201, &(0x7f00000018c0)) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r7, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r6}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x7c}, {0x6}]}, 0x10) fcntl$dupfd(r3, 0x0, r4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x2, 0x3, 0xfffe, 0x2000}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) 6.225605964s ago: executing program 3 (id=8254): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)={[{@numtail}, {@shortname_win95}, {@fat=@errors_remount}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@flush}, {@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_win95}, {@fat=@uid}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_winnt}]}, 0x97, 0x2a9, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x44}}, 0x0) 6.05676748s ago: executing program 3 (id=8257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) socket$inet_sctp(0x2, 0x0, 0x84) socket(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.79973782s ago: executing program 3 (id=8264): r0 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90) ptrace$setopts(0x4200, r1, 0x0, 0x0) signalfd4(r2, &(0x7f0000000040), 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, 0x7ffffdbd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') mq_open(0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000500)={{0xa, 0x4e24, 0x40, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7f}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1, {[0x0, 0x200, 0x7, 0x9, 0x2, 0x80000001, 0x6, 0x4]}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) 4.938067992s ago: executing program 3 (id=8272): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@empty, @in6=@private0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, 0xe8) write$P9_RREADLINK(r0, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1b, 0x1, 0x80, 0x0, 0x0, 0x3a, 0x1000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xa}, 0x0, 0x0, 0x1, 0x9, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) unshare(0x400) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000072ac63178760e89f780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e38f9f5495217a4bf6608aa78db464"], 0x90) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x38, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_CARRIER_CHANGES={0xfffffffffffffe15}]}, 0x38}}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) ftruncate(r4, 0x20cf01) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000feb602000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000200)) ftruncate(r6, 0x81fd) 3.176642432s ago: executing program 0 (id=8297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 3.053183681s ago: executing program 1 (id=8301): open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000080)=0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000240)={[{@i_version}]}, 0xfe, 0x490, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x400, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008008000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0xce9d7ea5af87cbdf, 0x0, &(0x7f0000000340)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000009c0)="60fe10cdd0", 0x1000, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f0000000440), &(0x7f00000007c0), 0x7, r2}, 0x38) 2.827864006s ago: executing program 1 (id=8306): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000e5ff428ee802ce8f6ff10f000000100000000200f000000000000000000100"/50], 0x0, 0x2a}, 0xffffffffffffff2b) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x8) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400020006c2bfc88505c8db8c26325948a7930000000000f5fffffffffeff000000000800080000010000"], 0x34}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) setpgid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000003640), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) 2.447526364s ago: executing program 4 (id=8310): socket$vsock_stream(0x28, 0x1, 0x0) r0 = memfd_secret(0x17f03f10111d804) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8010) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x7cb5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f00000002c0), &(0x7f00000012c0)=""/189}, 0x20) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet(r0, &(0x7f0000000480)=""/141, 0x8d, 0x40000000, &(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400000000f698bd4aec48940600"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006800e978000000000000a955fa774b0aa5fb20e12199fe00000a0000000000000014000600fc00000000000073939496e5c6067ca7ee26efda8e2e2323c6f14959022373ed4f2ff495e647ece312e131fb4f1ddad565fafae4ef6b383eb5e4988836ca369ba45436b09d149e29030bc3b7aa1ed8e79ce98fe5a37a739eac3db5a2803c52e4e7c5738e3c3a51a2007b9e0c0b81cc11c6846ac8f4f18524ada9c168d670bd60610de0ee5cc5c559f2c2110f35", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 2.317664934s ago: executing program 0 (id=8311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) socket$inet_sctp(0x2, 0x0, 0x84) socket(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.118075605s ago: executing program 0 (id=8312): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) shutdown(r0, 0x1) 1.971682887s ago: executing program 0 (id=8314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006119a0000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x9000000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@ifindex, r0, 0x2f, 0x20, 0x0, @prog_id}, 0x20) 1.874373532s ago: executing program 1 (id=8318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x3, 0x7ba, &(0x7f0000000740)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r7, 0xb, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x1054020, &(0x7f0000000400)=ANY=[], 0x2, 0x351, &(0x7f0000001900)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000400000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'batadv_slave_1\x00', 0xf9}) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="a351", @ANYRES16=0x0, @ANYBLOB="00042dbd70000000000005000000080011000000000006001c0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x24004004) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16"], 0x0) 1.728627935s ago: executing program 1 (id=8319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000010c0)=r5, 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x2, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x54}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r9 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 1.580919697s ago: executing program 1 (id=8320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc}, @initr0]}, &(0x7f0000000380)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x10000, 0x103) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x21) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) write$P9_RGETATTR(r7, &(0x7f00000001c0)={0xa0}, 0xa0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x1f7, 0x100}) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000080)={0xf384, 0xb, [{0xc, 0x1}, {0xc}, {0xe}, {0x9, 0x1}, {0xa}, {0xf, 0x1}, {0x9}, {0x4}, {0xc, 0x1}, {0x6}, {0xe, 0x1}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 1.546852883s ago: executing program 4 (id=8321): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(0x0, 0x0, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ftruncate(r4, 0x8001) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r6, 0x6c4f9fcd, 0x30}, &(0x7f0000000080)=0xc) (async) write$cgroup_devices(r2, &(0x7f0000000200)={'b', ' *:* ', 'wm\x00'}, 0x9) 1.503438039s ago: executing program 1 (id=8322): unshare(0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000008180)='./file0\x00', 0x198101c, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x1, 0x815d, &(0x7f00000081c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b70200001a000000bfa3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2}) timerfd_settime(r1, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000340)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x6, 0x8, 0x7, 0x3, 0x20, 0x6}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000580), 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r6, 0x0) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 1.4354745s ago: executing program 4 (id=8324): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000080)='GPL\x00', 0x8}, 0x90) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) r3 = creat(0x0, 0xd931d3864d39ddd8) close(r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000440)="b9ff060000000000000014f086ddb83e07a07abbf54d237f7e94d10bb347d709d4d40f0afc6e897f2549a356e93ca5e759f1b2676244", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) rename(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) execve(0x0, 0x0, &(0x7f0000000780)) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000100)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) 1.274503384s ago: executing program 2 (id=8327): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="186f4bb73c1639000024cf9961e0802caf7383d4140000000062e371102000000000009500"/52], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.24038782s ago: executing program 2 (id=8328): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xe, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x47}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 1.166646321s ago: executing program 2 (id=8329): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0xffffffffffffffff, r3) 1.122334828s ago: executing program 2 (id=8330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000040)) 1.070613765s ago: executing program 2 (id=8331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/13, 0xd}}], 0x1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000010c0)=r5, 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x2, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x54}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) close(r0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r10 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 1.061705457s ago: executing program 0 (id=8332): socket$vsock_stream(0x28, 0x1, 0x0) r0 = memfd_secret(0x17f03f10111d804) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x8010) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x7cb5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f00000002c0), &(0x7f00000012c0)=""/189}, 0x20) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet(r0, &(0x7f0000000480)=""/141, 0x8d, 0x40000000, &(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400000000f698bd4aec48940600"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000006800e978000000000000a955fa774b0aa5fb20e12199fe00000a0000000000000014000600fc00000000000073939496e5c6067ca7ee26efda8e2e2323c6f14959022373ed4f2ff495e647ece312e131fb4f1ddad565fafae4ef6b383eb5e4988836ca369ba45436b09d149e29030bc3b7aa1ed8e79ce98fe5a37a739eac3db5a2803c52e4e7c5738e3c3a51a2007b9e0c0b81cc11c6846ac8f4f18524ada9c168d670bd60610de0ee5cc5c559f2c2110f35", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 918.610179ms ago: executing program 3 (id=8333): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000300)={0x0}, 0x20) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x5, 0x0, [], [0x5a0, 0x100000ade, 0x3, 0x3, 0x0, 0x8000000000000001, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0x3, 0x1, 0x50bb9b81, 0x22a4, 0x7ff, 0x9, 0x0, 0x531, 0x6, 0x4, 0x8001, 0x80000, 0xe, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000007c0)={{}, 0x0, 0xc, @unused=[0x1, 0x84c, 0x742, 0x1], @devid}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0x0, 0x114}) bind$xdp(r0, &(0x7f0000000240), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 543.143846ms ago: executing program 4 (id=8334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc}, @initr0]}, &(0x7f0000000380)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x10000, 0x103) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x21) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) write$P9_RGETATTR(r7, &(0x7f00000001c0)={0xa0}, 0xa0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x1f7, 0x100}) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000080)={0xf384, 0xb, [{0xc, 0x1}, {0xc}, {0xe}, {0x9, 0x1}, {0xa}, {0xf, 0x1}, {0x9}, {0x4}, {0xc, 0x1}, {0x6}, {0xe, 0x1}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 501.979403ms ago: executing program 4 (id=8335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) fallocate(r0, 0x0, 0x0, 0x2c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 195.46092ms ago: executing program 2 (id=8336): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x608, 0x3, 0x328, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x4000000, 0x9c03, 0x21, 0x0, 'syz1\x00'}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r1 = socket(0x10, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x2e}}, 0x14) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x40) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x400}, @IFLA_MASTER={0x8, 0xa, r13}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@RTM_DELMDB={0xfffffffffffffee7, 0x55, 0x200, 0x70bd29, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@private=0xa010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x3, 0x0, {@in6_addr=@private2, 0x800}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40440}, 0x48881) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x0, 0xfffffffe, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x5616, 0x7, {{0x1d, 0x4, 0x1, 0x35, 0x74, 0x67, 0x0, 0x0, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xe, 0x3, 0xb, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@broadcast, 0x5}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x2, [{@empty, 0x4}]}, @cipso={0x86, 0x21, 0x3, [{0x2, 0x6, 'SoH='}, {0x6, 0x7, "e6f3c1a93b"}, {0x2, 0xe, "ba8bda2774b34d1a5a67dd28"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4}, 0x48) 163.171205ms ago: executing program 0 (id=8337): syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz81twkAQBeBnrzeWu/ApShOpIkoLaSN/ipRaONACR3qhCaMFc6AB4PB9l9Fo9j1pw109JZn7ZMlU2v67HduY1nPtvi4vX4arYKlJn8M4/33X5PV0/E/2P8nyOeSjjeRtKrVbE614Kdk9n9dW/L65zS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LEdAwAA//+Oww6X") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x5c}}, 0x0) 0s ago: executing program 4 (id=8338): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x13}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000"], &(0x7f0000000000)='syzkaller\x00', 0x3bb5}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e24, @empty}, 0xfe5c, &(0x7f0000000000)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x8000) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)}, 0x4048000) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="ad", 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0xc, 0x0, 0x0, 0x2000}, 0x48) socketpair(0x3, 0x800, 0x4, &(0x7f0000000140)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af0fff1000000b5090000000000007b9af0ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000778f21e409bd889980d7bf2455bc0b6b6f672e73627b1286b0aaf86334939910ac3de769e9fd4b21b9f9ec8119fe6c78c97d6f23ea3d2f0f496632bb3840c507e37043b7df5651"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 14][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.696321][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.781445][T27049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7746'. [ 470.841313][T26938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.891620][T27054] netlink: 'syz.1.7748': attribute type 4 has an invalid length. [ 470.973129][T27070] netlink: 'syz.1.7748': attribute type 4 has an invalid length. [ 471.016723][T27054] netlink: 'syz.1.7748': attribute type 2 has an invalid length. [ 471.041380][T27054] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 471.135369][T26938] veth0_vlan: entered promiscuous mode [ 471.164036][T26938] veth1_vlan: entered promiscuous mode [ 471.167128][T27087] loop1: detected capacity change from 0 to 512 [ 471.198637][T27087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 471.200855][T26938] veth0_macvtap: entered promiscuous mode [ 471.223160][T26938] veth1_macvtap: entered promiscuous mode [ 471.233121][T27087] EXT4-fs (loop1): 1 orphan inode deleted [ 471.238896][T27087] EXT4-fs (loop1): 1 truncate cleaned up [ 471.244835][T27094] 9pnet_fd: Insufficient options for proto=fd [ 471.263341][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.273802][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.283771][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.294867][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.304922][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.315362][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.325357][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.335811][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.345625][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.356060][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.366060][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.366132][T27087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.376505][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.376521][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.376534][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.377572][ T3148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.449213][T27087] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 471.449328][T26938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.475418][T27087] EXT4-fs (loop1): Remounting filesystem read-only [ 471.486722][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.497345][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.507459][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.518078][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.520674][T27087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 471.527923][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.547141][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.556963][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.567394][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.577209][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.587634][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.597673][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.607143][T27100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 471.608085][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.608101][T26938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.624535][ T29] audit: type=1400 audit(1719490533.420:41130): avc: denied { mounton } for pid=27086 comm="syz.1.7754" path="/root/syzkaller.YDo9gS/2/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.626645][T26938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.637221][T27087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 471.663853][T26938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.710022][T26938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.716632][T27087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 471.718886][T26938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.728193][T27087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 471.736987][T26938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.745779][T27087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 471.754303][T26938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.928644][T27109] tipc: Started in network mode [ 471.933615][T27109] tipc: Node identity 1, cluster identity 4711 [ 471.939895][T27109] tipc: Node number set to 1 [ 472.045692][T27116] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 472.053922][T27116] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 472.437161][T27146] loop3: detected capacity change from 0 to 512 [ 472.445012][T27146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 472.458562][T27146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7771: bg 0: block 264: padding at end of block bitmap is not set [ 472.473217][T27146] EXT4-fs (loop3): Remounting filesystem read-only [ 472.482717][T27146] EXT4-fs (loop3): 1 truncate cleaned up [ 472.492287][T27146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.508570][T27146] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 472.516289][T27146] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.610965][T27153] IPVS: sync thread started: state = BACKUP, mcast_ifn = caif0, syncid = 4, id = 0 [ 472.693715][T27156] 9pnet_fd: Insufficient options for proto=fd [ 472.764503][T27162] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 472.772781][T27162] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 472.941911][T27172] loop4: detected capacity change from 0 to 2048 [ 472.958880][T27172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.976019][T27172] ext4 filesystem being mounted at /root/syzkaller.4ESXkA/20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.034847][T27172] loop4: detected capacity change from 2048 to 64 [ 473.063635][ T55] kworker/u8:4: attempt to access beyond end of device [ 473.063635][ T55] loop4: rw=1, sector=1664, nr_sectors = 136 limit=64 [ 473.077295][ T55] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 208) [ 473.093780][ T55] buffer_io_error: 8 callbacks suppressed [ 473.093794][ T55] Buffer I/O error on device loop4, logical block 208 [ 473.106434][ T55] Buffer I/O error on device loop4, logical block 209 [ 473.113183][ T55] Buffer I/O error on device loop4, logical block 210 [ 473.120112][ T55] Buffer I/O error on device loop4, logical block 211 [ 473.126900][ T55] Buffer I/O error on device loop4, logical block 212 [ 473.133652][ T55] Buffer I/O error on device loop4, logical block 213 [ 473.140461][ T55] Buffer I/O error on device loop4, logical block 214 [ 473.149668][ T55] Buffer I/O error on device loop4, logical block 215 [ 473.156502][ T55] Buffer I/O error on device loop4, logical block 216 [ 473.163302][ T55] Buffer I/O error on device loop4, logical block 217 [ 473.175457][ T55] kworker/u8:4: attempt to access beyond end of device [ 473.175457][ T55] loop4: rw=1, sector=1536, nr_sectors = 8 limit=64 [ 473.188827][ T55] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 20 starting block 192) [ 473.203508][T26733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.214163][T27173] kmmpd-loop4: attempt to access beyond end of device [ 473.214163][T27173] loop4: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 473.227805][T27173] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 473.532647][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.602146][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.636974][T27189] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 473.645256][T27189] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 473.655262][T26837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.679267][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.748781][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.813980][T27190] lo speed is unknown, defaulting to 1000 [ 473.872004][ T11] bridge_slave_1: left allmulticast mode [ 473.877777][ T11] bridge_slave_1: left promiscuous mode [ 473.883767][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.907436][ T11] bridge_slave_0: left allmulticast mode [ 473.913089][ T11] bridge_slave_0: left promiscuous mode [ 473.919158][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.087420][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.098378][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.109259][ T11] bond0 (unregistering): Released all slaves [ 474.122160][T27222] tipc: MTU too low for tipc bearer [ 474.242812][T27233] loop3: detected capacity change from 0 to 8192 [ 474.251117][ T11] hsr_slave_0: left promiscuous mode [ 474.259054][ T11] hsr_slave_1: left promiscuous mode [ 474.266792][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.274414][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.284193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.292161][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.304478][ T11] veth1_macvtap: left promiscuous mode [ 474.310128][ T11] veth0_macvtap: left promiscuous mode [ 474.315975][ T11] veth1_vlan: left promiscuous mode [ 474.321259][ T11] veth0_vlan: left promiscuous mode [ 474.329740][T27233] loop3: p1 p2 p4 [ 474.333513][T27233] loop3: p1 size 108922248 extends beyond EOD, truncated [ 474.341181][T27233] loop3: p2 start 861536256 is beyond EOD, truncated [ 474.347905][T27233] loop3: p4 start 4194304 is beyond EOD, truncated [ 474.482325][ T11] team0 (unregistering): Port device team_slave_1 removed [ 474.509759][ T11] team0 (unregistering): Port device team_slave_0 removed [ 474.573473][T27223] lo speed is unknown, defaulting to 1000 [ 474.584797][T27244] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 474.593175][T27244] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 474.597387][T27190] chnl_net:caif_netlink_parms(): no params data found [ 474.748362][T27255] serio: Serial port pts0 [ 474.753039][ T29] audit: type=1400 audit(1719490536.550:41131): avc: denied { accept } for pid=27253 comm="syz.0.7800" path="socket:[107414]" dev="sockfs" ino=107414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 474.780611][ T29] audit: type=1326 audit(1719490536.580:41132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27254 comm="syz.2.7801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a1ce76b29 code=0x0 [ 474.817974][T27190] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.825104][T27190] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.833512][T27190] bridge_slave_0: entered allmulticast mode [ 474.840406][T27190] bridge_slave_0: entered promiscuous mode [ 474.859908][T27190] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.867043][T27190] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.876943][T27190] bridge_slave_1: entered allmulticast mode [ 474.890329][T27190] bridge_slave_1: entered promiscuous mode [ 474.932668][T27190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.944141][T27190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.958696][T27223] chnl_net:caif_netlink_parms(): no params data found [ 474.992086][T27190] team0: Port device team_slave_0 added [ 475.010542][T27190] team0: Port device team_slave_1 added [ 475.042856][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.078460][T27190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.085485][T27190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.111509][T27190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.134089][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.148572][T27190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.155649][T27190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.181843][T27190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.212755][T27223] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.219897][T27223] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.230426][T27223] bridge_slave_0: entered allmulticast mode [ 475.237290][T27223] bridge_slave_0: entered promiscuous mode [ 475.247972][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.262501][T27223] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.269660][T27223] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.293518][T27223] bridge_slave_1: entered allmulticast mode [ 475.303890][T27223] bridge_slave_1: entered promiscuous mode [ 475.330867][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.353943][T27190] hsr_slave_0: entered promiscuous mode [ 475.360676][T27190] hsr_slave_1: entered promiscuous mode [ 475.369442][T27190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.377401][T27190] Cannot create hsr debugfs directory [ 475.398251][T27223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.427857][T27223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.443038][ T11] bridge_slave_1: left allmulticast mode [ 475.448714][ T11] bridge_slave_1: left promiscuous mode [ 475.454370][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.462413][ T11] bridge_slave_0: left allmulticast mode [ 475.468092][ T11] bridge_slave_0: left promiscuous mode [ 475.473807][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.555007][ T29] audit: type=1326 audit(1719490537.356:41133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27276 comm="syz.3.7804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a1dbfcb29 code=0x0 [ 475.617685][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.640013][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.661228][ T11] bond0 (unregistering): Released all slaves [ 475.707914][T27284] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 475.716191][T27284] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 475.745980][T27223] team0: Port device team_slave_0 added [ 475.790532][T27223] team0: Port device team_slave_1 added [ 475.831991][ T11] hsr_slave_0: left promiscuous mode [ 475.839287][ T11] hsr_slave_1: left promiscuous mode [ 475.850894][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.858387][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.869270][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.876826][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.894274][ T11] veth1_macvtap: left promiscuous mode [ 475.899845][ T11] veth0_macvtap: left promiscuous mode [ 475.905417][ T11] veth1_vlan: left promiscuous mode [ 475.910816][ T11] veth0_vlan: left promiscuous mode [ 476.019367][ T11] team0 (unregistering): Port device team_slave_1 removed [ 476.030798][ T11] team0 (unregistering): Port device team_slave_0 removed [ 476.086792][T27294] tipc: MTU too low for tipc bearer [ 476.092406][T27223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.099394][T27223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.125333][T27223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.143034][T27223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.150083][T27223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.176123][T27223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.205353][T27223] hsr_slave_0: entered promiscuous mode [ 476.211894][T27223] hsr_slave_1: entered promiscuous mode [ 476.218005][T27223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.225657][T27223] Cannot create hsr debugfs directory [ 476.372383][T27190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 476.402769][T27190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.422374][T27190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.460367][T27190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.550636][T27190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.576063][T27190] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.728121][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.735325][ T3124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.794668][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.801775][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.852284][T27223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.881089][T27223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.898906][T27223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.914641][T27223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.008135][T27223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.013083][T27331] loop2: detected capacity change from 0 to 2048 [ 477.038720][T27223] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.050878][T27339] tipc: MTU too low for tipc bearer [ 477.062931][ T704] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.069726][T27331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.069997][ T704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.092186][T27331] ext4 filesystem being mounted at /root/syzkaller.LRnjBl/15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.106765][T27190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.118769][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.125910][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.168239][T27331] loop2: detected capacity change from 2048 to 64 [ 477.230007][ T40] kworker/u8:2: attempt to access beyond end of device [ 477.230007][ T40] loop2: rw=1, sector=1536, nr_sectors = 136 limit=64 [ 477.243543][ T40] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 192) [ 477.269971][T27223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.285743][T26938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.299198][T27341] kmmpd-loop2: attempt to access beyond end of device [ 477.299198][T27341] loop2: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 477.312830][T27341] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 477.428758][T27190] veth0_vlan: entered promiscuous mode [ 477.442231][T27190] veth1_vlan: entered promiscuous mode [ 477.464928][T27190] veth0_macvtap: entered promiscuous mode [ 477.475690][T27190] veth1_macvtap: entered promiscuous mode [ 477.491891][T27223] veth0_vlan: entered promiscuous mode [ 477.510318][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.520991][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.531019][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.541521][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.551538][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.562055][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.571957][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.582393][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.592222][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.602965][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.612921][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.623364][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.648922][T27190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.660091][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.670613][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.680842][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.691348][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.701162][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.711581][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.721553][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.731967][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.741773][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.752232][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.762155][T27190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.772704][T27190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.789352][T27190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.810494][T27223] veth1_vlan: entered promiscuous mode [ 477.853409][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.908783][T27190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.917633][T27190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.926476][T27190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.935208][T27190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.961072][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.986710][T27223] veth0_macvtap: entered promiscuous mode [ 478.019759][T27223] veth1_macvtap: entered promiscuous mode [ 478.044571][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.055072][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.064970][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.075461][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.085346][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.095863][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.105780][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.116209][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.126110][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.136637][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.146640][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.157070][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.166879][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.177309][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.214745][ T29] audit: type=1326 audit(1719490540.006:41134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.238524][ T29] audit: type=1326 audit(1719490540.006:41135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.262212][ T29] audit: type=1326 audit(1719490540.006:41136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.272438][T27223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.286409][ T29] audit: type=1326 audit(1719490540.006:41137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.317879][ T29] audit: type=1326 audit(1719490540.006:41138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.341590][ T29] audit: type=1326 audit(1719490540.006:41139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.365310][ T29] audit: type=1326 audit(1719490540.006:41140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27379 comm="syz.0.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd811567b29 code=0x7ffc0000 [ 478.444272][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.474670][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.485515][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.495445][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.506002][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.515973][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.526438][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.536284][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.546764][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.556646][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.567080][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.576949][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.587483][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.597491][T27223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.597516][T27223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.612080][T27223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.636289][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.665250][T27223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.674016][T27223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.682805][T27223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.691589][T27223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.716626][T27374] lo speed is unknown, defaulting to 1000 [ 478.768921][ T11] bridge_slave_1: left allmulticast mode [ 478.774672][ T11] bridge_slave_1: left promiscuous mode [ 478.780392][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.808038][ T11] bridge_slave_0: left allmulticast mode [ 478.813728][ T11] bridge_slave_0: left promiscuous mode [ 478.819504][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.836685][T27408] loop1: detected capacity change from 0 to 512 [ 478.933992][T27408] loop1: detected capacity change from 0 to 8192 [ 478.944163][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.953092][T27410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7783'. [ 478.953337][T27408] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 478.962065][T27410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7783'. [ 478.983517][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.994675][ T11] bond0 (unregistering): Released all slaves [ 479.044970][ T11] tipc: Left network mode [ 479.123820][ T11] hsr_slave_0: left promiscuous mode [ 479.131324][ T11] hsr_slave_1: left promiscuous mode [ 479.140269][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.147933][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.168506][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.176002][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.188409][ T11] veth1_macvtap: left promiscuous mode [ 479.194056][ T11] veth0_macvtap: left promiscuous mode [ 479.199923][ T11] veth1_vlan: left promiscuous mode [ 479.205234][ T11] veth0_vlan: left promiscuous mode [ 479.287946][T27418] loop1: detected capacity change from 0 to 2048 [ 479.330430][ T11] team0 (unregistering): Port device team_slave_1 removed [ 479.347969][ T11] team0 (unregistering): Port device team_slave_0 removed [ 479.394164][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7835'. [ 479.407554][T27374] chnl_net:caif_netlink_parms(): no params data found [ 479.474566][T27374] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.481807][T27374] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.490231][T27374] bridge_slave_0: entered allmulticast mode [ 479.519086][T27374] bridge_slave_0: entered promiscuous mode [ 479.525705][T27429] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 479.535816][T27374] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.542929][T27374] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.564855][T27374] bridge_slave_1: entered allmulticast mode [ 479.573394][T27374] bridge_slave_1: entered promiscuous mode [ 479.608383][T27430] tipc: MTU too low for tipc bearer [ 479.622986][T27374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.651762][T27374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.701946][T27374] team0: Port device team_slave_0 added [ 479.735351][T27374] team0: Port device team_slave_1 added [ 479.770657][T27374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.777692][T27374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.803757][T27374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.816296][T27374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.823246][T27374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.849215][T27374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.882634][T27374] hsr_slave_0: entered promiscuous mode [ 479.896438][T27374] hsr_slave_1: entered promiscuous mode [ 479.906769][T27374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.922064][T27374] Cannot create hsr debugfs directory [ 480.192952][T27374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 480.214134][T27374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 480.233441][T27374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 480.251089][T27374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 480.341174][T27374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.362456][T27374] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.382713][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.389885][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.418659][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.425877][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.457544][T27444] loop4: detected capacity change from 0 to 512 [ 480.498699][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 480.498712][ T29] audit: type=1326 audit(1719490542.306:41219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27449 comm="syz.1.7843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x0 [ 480.511147][T27374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.534446][T27444] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7844: bg 0: block 288: padding at end of block bitmap is not set [ 480.553906][T27444] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 480.563241][T27444] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.7844: attempt to clear invalid blocks 1024 len 1 [ 480.579251][T27444] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7844: invalid indirect mapped block 1819239214 (level 0) [ 480.598271][T27444] EXT4-fs (loop4): 1 truncate cleaned up [ 480.604430][T27444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.627313][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.701207][T27374] veth0_vlan: entered promiscuous mode [ 480.716403][T27374] veth1_vlan: entered promiscuous mode [ 480.744858][T27374] veth0_macvtap: entered promiscuous mode [ 480.754457][T27374] veth1_macvtap: entered promiscuous mode [ 480.768689][T27469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7846'. [ 480.798874][T27469] vlan2: entered promiscuous mode [ 480.804114][T27469] ip6gretap0: entered promiscuous mode [ 480.822665][T27469] ip6gretap0: left promiscuous mode [ 480.851642][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.862202][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.872084][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.882690][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.892565][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.903116][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.913063][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.923674][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.933652][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.944077][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.953920][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.964439][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.974300][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.984817][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.996686][T27374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.005279][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.015801][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.025771][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.036364][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.046229][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.053878][T27473] program syz.4.7848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.056752][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.075764][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.086217][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.096025][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.106477][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.116410][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.126976][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.136809][T27374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.147408][T27374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.159795][T27374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.173920][T27374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.182803][T27374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.192061][T27374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.201655][T27374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.346148][ T29] audit: type=1326 audit(1719490543.156:41220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.370062][ T29] audit: type=1326 audit(1719490543.156:41221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.396939][T27493] tipc: MTU too low for tipc bearer [ 481.415787][ T29] audit: type=1326 audit(1719490543.156:41222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.439746][ T29] audit: type=1326 audit(1719490543.176:41223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.463588][ T29] audit: type=1326 audit(1719490543.176:41224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.487352][ T29] audit: type=1326 audit(1719490543.216:41225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.511060][ T29] audit: type=1326 audit(1719490543.216:41226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 481.534846][ T29] audit: type=1326 audit(1719490543.216:41227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd118af9ba7 code=0x7ffc0000 [ 481.558448][ T29] audit: type=1326 audit(1719490543.216:41228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27489 comm="syz.2.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd118a9e559 code=0x7ffc0000 [ 481.575902][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7857'. [ 481.617172][T27509] program syz.0.7858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.618149][T27504] vlan2: entered promiscuous mode [ 481.709716][T27511] bond1: entered promiscuous mode [ 481.714931][T27511] bond1: entered allmulticast mode [ 481.721874][T27511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.731332][T27520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7862'. [ 481.741839][T27511] bond1 (unregistering): Released all slaves [ 481.746717][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 481.914387][T27533] loop3: detected capacity change from 0 to 2048 [ 481.932437][T27533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.950530][T27533] ext4 filesystem being mounted at /root/syzkaller.KogrXY/34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.996350][T26791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.089526][T27549] program syz.3.7871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.113549][T27551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7873'. [ 482.129176][T27551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7873'. [ 482.141103][T27551] vlan2: entered promiscuous mode [ 482.220676][T27557] loop4: detected capacity change from 0 to 1024 [ 482.260032][T27557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.302198][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.545425][T27567] loop4: detected capacity change from 0 to 1024 [ 482.558001][T27567] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 482.573275][T27567] EXT4-fs (loop4): mount failed [ 482.646651][T27573] loop4: detected capacity change from 0 to 2048 [ 482.656520][T27570] bond1: entered promiscuous mode [ 482.661642][T27570] bond1: entered allmulticast mode [ 482.676042][T27573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.703002][T27570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.709884][T27573] ext4 filesystem being mounted at /root/syzkaller.IUUqMy/11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.745689][T27570] bond1 (unregistering): Released all slaves [ 482.758272][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.867582][T27588] loop4: detected capacity change from 0 to 512 [ 482.884120][T27590] loop2: detected capacity change from 0 to 2048 [ 482.902279][T27596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=27596 comm=syz.0.7888 [ 482.916348][T27588] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7883: bg 0: block 288: padding at end of block bitmap is not set [ 482.931205][T27596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=27596 comm=syz.0.7888 [ 482.931466][T27594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7887'. [ 482.944079][T27596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=27596 comm=syz.0.7888 [ 482.967687][T27588] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 483.012693][T27588] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.7883: attempt to clear invalid blocks 1024 len 1 [ 483.039094][T27588] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.7883: invalid indirect mapped block 1819239214 (level 0) [ 483.053439][T27588] EXT4-fs (loop4): 1 truncate cleaned up [ 483.067558][T27588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.136638][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.221085][T27623] loop4: detected capacity change from 0 to 512 [ 483.237483][T27623] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.7894: bad orphan inode 17 [ 483.253154][T27623] ext4_test_bit(bit=16, block=4) = 1 [ 483.258564][T27623] is_bad_inode(inode)=0 [ 483.262710][T27623] NEXT_ORPHAN(inode)=0 [ 483.266802][T27623] max_ino=32 [ 483.269992][T27623] i_nlink=1 [ 483.275790][T27623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.341912][T27623] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.7894: bg 0: block 7: invalid block bitmap [ 483.431507][T27633] bond1: entered promiscuous mode [ 483.431622][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.436792][T27633] bond1: entered allmulticast mode [ 483.451433][T27633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.472757][T27633] bond1 (unregistering): Released all slaves [ 483.538297][T27653] vlan2: entered promiscuous mode [ 483.543419][T27653] veth1_to_batadv: entered promiscuous mode [ 483.561833][T27653] veth1_to_batadv: left promiscuous mode [ 483.571939][T27655] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 483.886867][T27678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 483.947423][T27684] lo speed is unknown, defaulting to 1000 [ 484.099931][T27692] __nla_validate_parse: 4 callbacks suppressed [ 484.099947][T27692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7917'. [ 484.158922][T27697] lo speed is unknown, defaulting to 1000 [ 484.337545][T27719] program syz.0.7924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.482910][T27730] netlink: 'syz.3.7929': attribute type 21 has an invalid length. [ 484.500811][T27730] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7929'. [ 484.509959][T27730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7929'. [ 484.698131][T27747] 9pnet_fd: Insufficient options for proto=fd [ 484.756050][T27751] loop4: detected capacity change from 0 to 1024 [ 484.763520][T27751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 484.777721][T27751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 484.788822][T27751] System zones: 0-1, 3-12 [ 484.793842][T27751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.811679][T27751] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 16: comm syz.4.7935: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 484.860023][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.960029][T27762] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071578845184) [ 484.970903][T27762] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 485.197951][T27774] loop2: detected capacity change from 0 to 256 [ 485.263138][T27778] loop4: detected capacity change from 0 to 512 [ 485.273707][T27778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 485.306698][T27778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.324704][T27778] ext4 filesystem being mounted at /root/syzkaller.IUUqMy/30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.369411][T27789] netlink: 4880 bytes leftover after parsing attributes in process `syz.0.7947'. [ 485.391446][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.476939][T27800] loop4: detected capacity change from 0 to 2048 [ 485.504574][T27800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.535329][T27800] ext4 filesystem being mounted at /root/syzkaller.IUUqMy/31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.550045][T27806] tipc: MTU too low for tipc bearer [ 485.589578][T27811] lo speed is unknown, defaulting to 1000 [ 485.614865][T27800] loop4: detected capacity change from 2048 to 64 [ 485.667520][T27190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.688700][T27802] kmmpd-loop4: attempt to access beyond end of device [ 485.688700][T27802] loop4: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 485.702328][T27802] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 485.825282][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 485.825301][ T29] audit: type=1400 audit(1719490547.636:41391): avc: denied { bind } for pid=27827 comm="syz.1.7957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 485.882833][ T29] audit: type=1326 audit(1719490547.656:41392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.1.7957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x0 [ 485.923010][ T29] audit: type=1326 audit(1719490547.716:41393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.1.7957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x0 [ 485.972784][T27838] loop3: detected capacity change from 0 to 512 [ 485.987726][T27838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 486.023254][T27841] xt_TCPMSS: Only works on TCP SYN packets [ 486.024291][T27838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.047654][T27838] ext4 filesystem being mounted at /root/syzkaller.KogrXY/54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.145825][T26791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.299889][T27855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7964'. [ 486.325680][T27855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7964'. [ 486.340112][T27852] lo speed is unknown, defaulting to 1000 [ 486.362954][T27858] loop3: detected capacity change from 0 to 128 [ 486.389700][T27858] FAT-fs (loop3): Unrecognized mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" or missing value [ 486.448386][T27843] lo speed is unknown, defaulting to 1000 [ 486.612666][T27867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27867 comm=syz.3.7967 [ 486.664270][T27843] chnl_net:caif_netlink_parms(): no params data found [ 486.780691][T27882] loop1: detected capacity change from 0 to 512 [ 486.792383][ T29] audit: type=1326 audit(1719490548.546:41394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 486.816448][ T29] audit: type=1326 audit(1719490548.546:41395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 486.840072][ T29] audit: type=1326 audit(1719490548.546:41396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 486.863842][ T29] audit: type=1326 audit(1719490548.546:41397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 486.887400][ T29] audit: type=1326 audit(1719490548.556:41398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 486.911024][ T29] audit: type=1326 audit(1719490548.556:41399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 486.934860][ T29] audit: type=1326 audit(1719490548.556:41400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.2.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd118af9ba7 code=0x7ffc0000 [ 486.964117][T27882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 487.004603][T27843] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.012395][T27843] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.020106][T27843] bridge_slave_0: entered allmulticast mode [ 487.026895][T27843] bridge_slave_0: entered promiscuous mode [ 487.034405][T27885] netlink: 'syz.0.7969': attribute type 1 has an invalid length. [ 487.042242][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7969'. [ 487.045751][T27882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.063745][T27843] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.069709][T27897] loop3: detected capacity change from 0 to 512 [ 487.070866][T27843] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.084487][T27882] ext4 filesystem being mounted at /root/syzkaller.cc6V75/25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.097304][T27843] bridge_slave_1: entered allmulticast mode [ 487.103337][T27897] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 487.107373][T27843] bridge_slave_1: entered promiscuous mode [ 487.111596][T27897] EXT4-fs (loop3): orphan cleanup on readonly fs [ 487.124856][T27897] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.139895][T27897] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 487.146895][T27897] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7974: bg 0: block 40: padding at end of block bitmap is not set [ 487.161105][T27894] tipc: MTU too low for tipc bearer [ 487.174006][T27843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.190382][T27223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.204956][T27897] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 487.220657][T27843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.232333][T27897] EXT4-fs (loop3): 1 truncate cleaned up [ 487.238700][T27897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.263367][T27843] team0: Port device team_slave_0 added [ 487.270420][T27843] team0: Port device team_slave_1 added [ 487.276619][T27897] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.7974: bad symlink. [ 487.299666][T27843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.306682][T27843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.332942][T27843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.338809][T27897] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.7974: bad symlink. [ 487.365420][T27843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.372382][T27843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.398347][T27843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.447404][T26791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.471391][T27843] hsr_slave_0: entered promiscuous mode [ 487.477985][T27843] hsr_slave_1: entered promiscuous mode [ 487.485254][T27843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.493510][T27843] Cannot create hsr debugfs directory [ 487.592102][T27917] 9pnet_fd: Insufficient options for proto=fd [ 487.629517][T27915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=27915 comm=syz.0.7982 [ 487.643665][T27843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.710434][T27843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.762462][T27843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.794535][T27931] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7985'. [ 487.810894][T27931] gretap0: entered promiscuous mode [ 487.828751][T27931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 487.856228][T27843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.871979][T27934] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7985'. [ 487.881058][T27934] 0ªX¹¦D: renamed from gretap0 [ 487.887614][T27934] 0ªX¹¦D: left promiscuous mode [ 487.892662][T27934] 0ªX¹¦D: entered allmulticast mode [ 487.900275][T27934] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 487.926636][ T40] bridge_slave_1: left allmulticast mode [ 487.932343][ T40] bridge_slave_1: left promiscuous mode [ 487.938036][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.956173][ T40] bridge_slave_0: left allmulticast mode [ 487.961828][ T40] bridge_slave_0: left promiscuous mode [ 487.967635][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.062556][T27940] loop2: detected capacity change from 0 to 512 [ 488.070721][T27940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.086862][T27940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.102246][T27940] ext4 filesystem being mounted at /root/syzkaller.9Bpzqe/24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 488.136359][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.148056][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.159079][ T40] bond0 (unregistering): Released all slaves [ 488.177079][T27374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.200316][T27843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 488.211953][T27843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 488.221148][T27843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 488.237308][T27843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 488.281885][T27843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.302485][T27843] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.319671][ T40] hsr_slave_0: left promiscuous mode [ 488.332049][ T40] hsr_slave_1: left promiscuous mode [ 488.346063][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.353596][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.376974][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.384441][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.406689][T27949] loop3: detected capacity change from 0 to 512 [ 488.418977][ T40] veth1_macvtap: left promiscuous mode [ 488.424500][ T40] veth0_macvtap: left promiscuous mode [ 488.427987][T27949] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 488.430041][ T40] veth1_vlan: left promiscuous mode [ 488.443955][ T40] veth0_vlan: left promiscuous mode [ 488.490937][T27949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.505440][T27949] ext4 filesystem being mounted at /root/syzkaller.KogrXY/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.535924][T26791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.674179][ T40] team0 (unregistering): Port device team_slave_1 removed [ 488.689141][ T40] team0 (unregistering): Port device team_slave_0 removed [ 488.770447][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.777619][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.810377][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.817592][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.866037][T27978] lo speed is unknown, defaulting to 1000 [ 488.870000][T27843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.992685][T27843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.034680][T27996] loop1: detected capacity change from 0 to 2048 [ 489.125452][T27996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.161358][T27996] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 16: comm syz.1.8007: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 489.244464][T27843] veth0_vlan: entered promiscuous mode [ 489.264070][T27223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.267784][T27843] veth1_vlan: entered promiscuous mode [ 489.325764][T27843] veth0_macvtap: entered promiscuous mode [ 489.343442][T27843] veth1_macvtap: entered promiscuous mode [ 489.364440][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.375111][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.385042][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.395499][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.405315][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.415750][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.425598][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.436033][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.445845][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.456277][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.466141][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.476698][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.486898][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.497431][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.510192][T27843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.556371][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.566904][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.576806][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.587329][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.597442][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.607879][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.617789][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.628225][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.638025][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.648446][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.658309][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.668724][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.678553][T27843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.689408][T27843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.763969][T27843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.778208][T27843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.787026][T27843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.795781][T27843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.804464][T27843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.978019][T28048] lo speed is unknown, defaulting to 1000 [ 490.203724][T28081] x_tables: duplicate entry at hook 1 [ 490.214326][T28084] x_tables: duplicate entry at hook 1 [ 490.560982][T28104] loop2: detected capacity change from 0 to 2048 [ 490.637577][T28104] loop2: p2 p3 p7 [ 490.691507][T28111] loop4: detected capacity change from 0 to 128 [ 490.719073][T28111] EXT4-fs: Ignoring removed i_version option [ 490.725186][T28111] EXT4-fs: test_dummy_encryption option not supported [ 490.801804][T28113] loop3: detected capacity change from 0 to 8192 [ 490.850262][T28113] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 490.855572][T28113] loop3: partition table partially beyond EOD, truncated [ 490.874684][T28113] loop3: p1 start 277760 is beyond EOD, truncated [ 490.881203][T28113] loop3: p2 start 6684676 is beyond EOD, truncated [ 490.908956][T28113] loop3: p5 start 6684676 is beyond EOD, truncated [ 491.080565][T28137] netlink: 33 bytes leftover after parsing attributes in process `syz.0.8042'. [ 491.191006][T28146] loop3: detected capacity change from 0 to 128 [ 491.212976][T28146] FAT-fs (loop3): Directory bread(block 11554) failed [ 491.231130][T28146] FAT-fs (loop3): Directory bread(block 11555) failed [ 491.268149][T28146] FAT-fs (loop3): Directory bread(block 11556) failed [ 491.281001][T28146] FAT-fs (loop3): Directory bread(block 11557) failed [ 491.289399][T28146] FAT-fs (loop3): Directory bread(block 11558) failed [ 491.299334][T28146] FAT-fs (loop3): Directory bread(block 11559) failed [ 491.300221][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 491.306179][T28146] FAT-fs (loop3): Directory bread(block 11560) failed [ 491.327703][T28146] FAT-fs (loop3): Directory bread(block 11561) failed [ 491.335417][T28146] FAT-fs (loop3): Directory bread(block 11562) failed [ 491.342251][T28146] FAT-fs (loop3): Directory bread(block 11563) failed [ 491.410219][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 491.410299][ T29] audit: type=1400 audit(1719490553.216:41476): avc: denied { write } for pid=28160 comm="syz.2.8051" path="socket:[112157]" dev="sockfs" ino=112157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 491.462081][T28166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28166 comm=syz.3.8052 [ 491.604681][ T29] audit: type=1400 audit(1719490553.406:41477): avc: denied { getopt } for pid=28165 comm="syz.3.8052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 491.731205][T28174] loop1: detected capacity change from 0 to 512 [ 491.841479][T28174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.860018][T28174] ext4 filesystem being mounted at /root/syzkaller.cc6V75/42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.860955][T28172] loop3: detected capacity change from 0 to 764 [ 491.880945][T28172] rock: directory entry would overflow storage [ 491.887158][T28172] rock: sig=0x4654, size=5, remaining=4 [ 491.904493][ T29] audit: type=1326 audit(1719490553.706:41478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 491.928893][ T29] audit: type=1326 audit(1719490553.736:41479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 491.952503][ T29] audit: type=1326 audit(1719490553.736:41480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 491.976071][ T29] audit: type=1326 audit(1719490553.736:41481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 492.003621][ T29] audit: type=1326 audit(1719490553.756:41482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 492.004107][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8055'. [ 492.027230][ T29] audit: type=1326 audit(1719490553.756:41483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 492.059832][ T29] audit: type=1326 audit(1719490553.756:41484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 492.083590][ T29] audit: type=1326 audit(1719490553.756:41485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28173 comm="syz.1.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30f76db29 code=0x7ffc0000 [ 492.107304][T28185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8056'. [ 492.168186][T28185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8056'. [ 492.289063][T27223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.389643][T28211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8064'. [ 492.398829][T28212] 9pnet_fd: Insufficient options for proto=fd [ 492.409478][T28211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8064'. [ 492.418698][T28211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8064'. [ 492.513026][T28223] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 492.559917][T28225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8069'. [ 492.596659][T28225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8069'. [ 492.762575][T28235] loop2: detected capacity change from 0 to 2048 [ 492.816399][T28235] Alternate GPT is invalid, using primary GPT. [ 492.822788][T28235] loop2: p1 p2 p3 [ 493.439531][T28255] loop1: detected capacity change from 0 to 2048 [ 493.460440][T28255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.536445][T28255] loop1: detected capacity change from 2048 to 0 [ 493.543348][T28260] lo speed is unknown, defaulting to 1000 [ 493.562883][T28255] syz.1.8078: attempt to access beyond end of device [ 493.562883][T28255] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 493.609865][T28255] syz.1.8078: attempt to access beyond end of device [ 493.609865][T28255] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 493.624005][T28255] syz.1.8078: attempt to access beyond end of device [ 493.624005][T28255] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 493.643052][T28267] bond1: entered promiscuous mode [ 493.645776][T28255] syz.1.8078: attempt to access beyond end of device [ 493.645776][T28255] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 493.648141][T28267] bond1: entered allmulticast mode [ 493.661439][T28255] syz.1.8078: attempt to access beyond end of device [ 493.661439][T28255] loop1: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 493.681273][T28267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.713732][T28267] bond1 (unregistering): Released all slaves [ 493.730839][T28255] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 6: comm syz.1.8078: unable to read itable block [ 493.747589][T28255] syz.1.8078: attempt to access beyond end of device [ 493.747589][T28255] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 493.761549][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 493.764982][T28276] 9pnet_fd: Insufficient options for proto=fd [ 493.770376][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 493.782799][T28255] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 493.791595][T28255] syz.1.8078: attempt to access beyond end of device [ 493.791595][T28255] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 493.805528][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 493.822485][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 493.829297][T28255] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #18: comm syz.1.8078: mark_inode_dirty error [ 493.842701][T28255] syz.1.8078: attempt to access beyond end of device [ 493.842701][T28255] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 493.856390][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 493.864962][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 493.873670][T28255] syz.1.8078: attempt to access beyond end of device [ 493.873670][T28255] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 493.907123][T28255] syz.1.8078: attempt to access beyond end of device [ 493.907123][T28255] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 493.948549][T28255] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 6: comm syz.1.8078: unable to read itable block [ 493.964627][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 493.973384][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 493.980211][T28255] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 493.989799][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 493.999061][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 494.005895][T28255] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #18: comm syz.1.8078: mark_inode_dirty error [ 494.017584][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 494.033922][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 494.068677][T28255] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 6: comm syz.1.8078: unable to read itable block [ 494.112133][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 494.122062][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 494.128905][T28255] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 494.142267][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 494.150745][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 494.157859][T28255] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #18: comm syz.1.8078: mark_inode_dirty error [ 494.169814][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 494.178149][T28255] EXT4-fs (loop1): I/O error while writing superblock [ 494.213362][T28300] loop4: detected capacity change from 0 to 1024 [ 494.216721][T28255] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #18: block 6: comm syz.1.8078: unable to read itable block [ 494.232901][T28300] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 494.243522][T28255] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 494.252436][T28300] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 494.267955][T28300] EXT4-fs (loop4): orphan cleanup on readonly fs [ 494.277673][T28300] EXT4-fs error (device loop4): ext4_map_blocks:689: inode #3: block 3: comm syz.4.8090: lblock 3 mapped to illegal pblock 3 (length 1) [ 494.306092][T28300] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.8090: Failed to acquire dquot type 0 [ 494.325213][T28300] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #3: block 3: comm syz.4.8090: lblock 3 mapped to illegal pblock 3 (length 1) [ 494.344820][T28300] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.8090: Failed to acquire dquot type 0 [ 494.363548][T28300] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.8090: Freeing blocks not in datazone - block = 0, count = 4096 [ 494.378169][T28300] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #3: block 3: comm syz.4.8090: lblock 3 mapped to illegal pblock 3 (length 1) [ 494.396923][T28300] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.8090: Failed to acquire dquot type 0 [ 494.421512][T28300] EXT4-fs (loop4): 1 orphan inode deleted [ 494.428551][T28300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 494.478548][T28300] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 494.560542][T28306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8093'. [ 494.579905][T27843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.643674][T25335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.740907][T25335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.811403][T25335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.863068][T28330] loop4: detected capacity change from 0 to 512 [ 494.872271][T25335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.897510][T28330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.910868][T28330] ext4 filesystem being mounted at /root/syzkaller.xypjim/21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.969991][T28337] 9pnet_fd: Insufficient options for proto=fd [ 494.980759][T25335] bridge_slave_1: left allmulticast mode [ 494.986501][T25335] bridge_slave_1: left promiscuous mode [ 494.992217][T25335] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.024889][T25335] bridge_slave_0: left allmulticast mode [ 495.030563][T25335] bridge_slave_0: left promiscuous mode [ 495.037514][T25335] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.173415][T27843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.208354][T25335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.247541][T25335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.277091][T25335] bond0 (unregistering): Released all slaves [ 495.302255][T28347] loop4: detected capacity change from 0 to 1024 [ 495.312062][T28315] lo speed is unknown, defaulting to 1000 [ 495.318998][T28347] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 495.333570][T28347] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 495.353418][T28347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 495.376024][T28347] EXT4-fs error (device loop4): ext4_map_blocks:689: inode #3: block 3: comm syz.4.8105: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.423948][T28347] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.8105: Failed to acquire dquot type 0 [ 495.440976][T28350] program syz.2.8106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.459514][T25335] hsr_slave_0: left promiscuous mode [ 495.465368][T28347] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #3: block 3: comm syz.4.8105: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.479922][T25335] hsr_slave_1: left promiscuous mode [ 495.495974][T25335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.503448][T25335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.518438][T28347] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.8105: Failed to acquire dquot type 0 [ 495.532943][T25335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.540488][T25335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.550733][T28347] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.8105: Freeing blocks not in datazone - block = 0, count = 4096 [ 495.564535][T28347] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #3: block 3: comm syz.4.8105: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.582203][T25335] veth1_macvtap: left promiscuous mode [ 495.587827][T25335] veth0_macvtap: left promiscuous mode [ 495.593442][T25335] veth1_vlan: left promiscuous mode [ 495.598726][T25335] veth0_vlan: left promiscuous mode [ 495.601367][T28353] loop2: detected capacity change from 0 to 512 [ 495.610793][T28347] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.8105: Failed to acquire dquot type 0 [ 495.640236][T28347] EXT4-fs (loop4): 1 orphan inode deleted [ 495.656037][T28347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.702538][T27843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.785348][T25335] team0 (unregistering): Port device team_slave_1 removed [ 495.800941][T28357] dccp_close: ABORT with 11 bytes unread [ 495.807081][T25335] team0 (unregistering): Port device team_slave_0 removed [ 495.930958][T28365] bond1: entered promiscuous mode [ 495.936123][T28365] bond1: entered allmulticast mode [ 495.941488][T28365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.957483][T28365] bond1 (unregistering): Released all slaves [ 495.982739][T28315] chnl_net:caif_netlink_parms(): no params data found [ 496.058189][T28315] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.065377][T28315] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.076318][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 496.102406][T28315] bridge_slave_0: entered allmulticast mode [ 496.115390][T28315] bridge_slave_0: entered promiscuous mode [ 496.122814][T28315] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.129928][T28315] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.145001][T28315] bridge_slave_1: entered allmulticast mode [ 496.151521][T28315] bridge_slave_1: entered promiscuous mode [ 496.199969][T28315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.210976][T28315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.229888][T28396] lo speed is unknown, defaulting to 1000 [ 496.241400][T28315] team0: Port device team_slave_0 added [ 496.247577][T28398] 9pnet_fd: Insufficient options for proto=fd [ 496.256566][T28315] team0: Port device team_slave_1 added [ 496.295208][T28315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.302188][T28315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.328778][T28315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.340948][T28315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.347930][T28315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.374011][T28315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.424342][T28315] hsr_slave_0: entered promiscuous mode [ 496.430625][T28315] hsr_slave_1: entered promiscuous mode [ 496.439045][T28315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.446695][T28315] Cannot create hsr debugfs directory [ 496.483872][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 496.483886][ T29] audit: type=1400 audit(1719490558.286:41608): avc: denied { audit_read } for pid=28406 comm="syz.0.8120" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.521687][T28409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28409 comm=syz.0.8120 [ 496.555806][T28407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28407 comm=syz.0.8120 [ 496.630900][ T29] audit: type=1326 audit(1719490558.436:41609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28414 comm="syz.0.8121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd811567b29 code=0x0 [ 496.829689][T28315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.838781][T28315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.850884][T28315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.859958][T28315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.931264][T28315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.945141][T28315] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.955358][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.962498][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.978199][T28419] __nla_validate_parse: 4 callbacks suppressed [ 496.978214][T28419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8122'. [ 496.998922][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.006139][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.050417][T28422] loop2: detected capacity change from 0 to 512 [ 497.069968][T28422] EXT4-fs: Ignoring removed i_version option [ 497.101385][T28422] EXT4-fs (loop2): 1 truncate cleaned up [ 497.109665][T28315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.127388][T28422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.160283][ T29] audit: type=1400 audit(1719490558.966:41610): avc: denied { rename } for pid=28421 comm="syz.2.8123" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 497.262354][ T29] audit: type=1400 audit(1719490559.016:41611): avc: denied { write } for pid=28421 comm="syz.2.8123" name="file1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 497.284623][ T29] audit: type=1400 audit(1719490559.016:41612): avc: denied { add_name } for pid=28421 comm="syz.2.8123" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 497.305263][ T29] audit: type=1400 audit(1719490559.016:41613): avc: denied { rename } for pid=28421 comm="syz.2.8123" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 497.309302][T28315] veth0_vlan: entered promiscuous mode [ 497.327080][ T29] audit: type=1400 audit(1719490559.016:41614): avc: denied { reparent } for pid=28421 comm="syz.2.8123" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 497.354535][ T29] audit: type=1400 audit(1719490559.016:41615): avc: denied { remove_name } for pid=28421 comm="syz.2.8123" name="file2" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 497.367943][T28315] veth1_vlan: entered promiscuous mode [ 497.389371][T27374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.398242][T28315] veth0_macvtap: entered promiscuous mode [ 497.406589][T28315] veth1_macvtap: entered promiscuous mode [ 497.420988][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.431440][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.441350][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.441363][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.441375][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.472482][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.482419][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.482491][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.482506][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.482580][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.482595][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.482676][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.482690][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.482745][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.483853][T28315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.493336][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.587920][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.598000][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.608543][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.618416][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.623707][ T29] audit: type=1400 audit(1719490559.426:41616): avc: denied { append } for pid=28443 comm="syz.0.8127" name="pfkey" dev="proc" ino=4026534153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 497.628834][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.628890][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.628904][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.628919][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.628930][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.628974][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.713208][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.719814][T28451] loop2: detected capacity change from 0 to 2048 [ 497.723016][T28315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.739735][T28315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.752369][T28315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.762492][T28315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.767132][T28451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.771263][T28315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.792466][T28315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.801171][T28315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.804611][T28451] ext4 filesystem being mounted at /root/syzkaller.9Bpzqe/62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.849130][T27374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.919271][T28464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8130'. [ 498.198128][ T29] audit: type=1326 audit(1719490560.006:41617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28482 comm="syz.4.8136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8778eb6b29 code=0x0 [ 498.486059][T28501] loop1: detected capacity change from 0 to 512 [ 498.507921][T28501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.540150][T28501] ext4 filesystem being mounted at /root/syzkaller.NjPMj3/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.573220][T28501] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.8141: Failed to acquire dquot type 0 [ 498.787335][T28508] ip6t_srh: unknown srh match flags 4014 [ 499.090820][T28511] loop4: detected capacity change from 0 to 8192 [ 499.135238][T28511] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 499.140480][T28511] loop4: partition table partially beyond EOD, truncated [ 499.150482][T28511] loop4: p1 start 277760 is beyond EOD, truncated [ 499.156959][T28511] loop4: p2 start 6684676 is beyond EOD, truncated [ 499.164972][T28511] loop4: p5 start 6684676 is beyond EOD, truncated [ 499.315250][T28315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.425475][T28525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8149'. [ 499.498250][T28530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8151'. [ 499.514642][T28530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8151'. [ 499.601319][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 499.702652][T28550] loop4: detected capacity change from 0 to 512 [ 499.712609][T28550] EXT4-fs: Ignoring removed oldalloc option [ 499.715834][T28552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8156'. [ 499.727815][T28550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 500.280366][T28568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8164'. [ 500.312016][T28568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8164'. [ 500.528200][T28579] loop2: detected capacity change from 0 to 512 [ 500.559455][T28579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.635901][T27374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.653709][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 500.702291][T28617] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 500.708815][T28617] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 500.716498][T28617] vhci_hcd vhci_hcd.0: Device attached [ 500.738014][T28618] vhci_hcd: connection closed [ 500.738171][T28611] vhci_hcd: stop threads [ 500.747345][T28611] vhci_hcd: release socket [ 500.751780][T28611] vhci_hcd: disconnect device [ 500.771489][T28625] lo speed is unknown, defaulting to 1000 [ 501.227739][T28635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8175'. [ 501.281613][T28635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8175'. [ 501.372111][T28639] loop1: detected capacity change from 0 to 8192 [ 501.436435][T28639] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 501.441672][T28639] loop1: partition table partially beyond EOD, truncated [ 501.448885][T28639] loop1: p1 start 277760 is beyond EOD, truncated [ 501.455365][T28639] loop1: p2 start 6684676 is beyond EOD, truncated [ 501.463750][T28639] loop1: p5 start 6684676 is beyond EOD, truncated [ 502.420871][T28676] __nla_validate_parse: 2 callbacks suppressed [ 502.420886][T28676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8188'. [ 502.446832][T28676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8188'. [ 502.585979][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 502.585992][ T29] audit: type=1326 audit(1719490564.396:41639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.650692][ T29] audit: type=1326 audit(1719490564.426:41640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.674320][ T29] audit: type=1326 audit(1719490564.426:41641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.698020][ T29] audit: type=1326 audit(1719490564.426:41642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.722135][ T29] audit: type=1326 audit(1719490564.426:41643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.745917][ T29] audit: type=1326 audit(1719490564.426:41644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.769651][ T29] audit: type=1326 audit(1719490564.426:41645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd118af9ba7 code=0x7ffc0000 [ 502.793322][ T29] audit: type=1326 audit(1719490564.426:41646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd118a9e559 code=0x7ffc0000 [ 502.817505][ T29] audit: type=1326 audit(1719490564.426:41647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd118b02b29 code=0x7ffc0000 [ 502.829972][T28688] loop1: detected capacity change from 0 to 512 [ 502.841145][ T29] audit: type=1326 audit(1719490564.426:41648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28681 comm="syz.2.8190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd118af9ba7 code=0x7ffc0000 [ 502.851059][T28688] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 502.933788][T28691] program syz.4.8193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.973429][T28688] 9pnet: Could not find request transport: t [ 503.087334][T28705] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8199'. [ 503.115718][T28701] loop1: detected capacity change from 0 to 8192 [ 503.185325][T28701] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 503.190612][T28701] loop1: partition table partially beyond EOD, truncated [ 503.227680][T28701] loop1: p1 start 277760 is beyond EOD, truncated [ 503.234125][T28701] loop1: p2 start 6684676 is beyond EOD, truncated [ 503.248849][T28711] loop4: detected capacity change from 0 to 8192 [ 503.325031][T28701] loop1: p5 start 6684676 is beyond EOD, truncated [ 503.361424][T28714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8202'. [ 503.536297][T28725] lo speed is unknown, defaulting to 1000 [ 503.731572][T28743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8209'. [ 503.807386][T28752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8212'. [ 503.816957][T28752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.824625][T28752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.850095][T28752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.857572][T28752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.972044][T28746] lo speed is unknown, defaulting to 1000 [ 504.108787][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.265881][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.298495][T28770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8216'. [ 504.343760][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.549118][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.632422][T28746] chnl_net:caif_netlink_parms(): no params data found [ 504.772583][ T55] bridge_slave_1: left allmulticast mode [ 504.778317][ T55] bridge_slave_1: left promiscuous mode [ 504.783988][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.827737][ T55] bridge_slave_0: left allmulticast mode [ 504.833456][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.137086][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.147474][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.166264][ T55] bond0 (unregistering): Released all slaves [ 505.255358][T28792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8222'. [ 505.276524][ T55] IPVS: stopping backup sync thread 27153 ... [ 505.350995][T28746] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.351032][T28746] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.353356][T28746] bridge_slave_0: entered allmulticast mode [ 505.376610][T28746] bridge_slave_0: entered promiscuous mode [ 505.381172][T28746] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.381209][T28746] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.381423][T28746] bridge_slave_1: entered allmulticast mode [ 505.381934][T28746] bridge_slave_1: entered promiscuous mode [ 505.414600][ T55] hsr_slave_0: left promiscuous mode [ 505.416817][ T55] hsr_slave_1: left promiscuous mode [ 505.417232][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.417266][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.417915][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.417940][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.421368][ T55] veth1_macvtap: left promiscuous mode [ 505.421389][ T55] veth0_macvtap: left promiscuous mode [ 505.421486][ T55] veth1_vlan: left promiscuous mode [ 505.421517][ T55] veth0_vlan: left promiscuous mode [ 505.685205][ T55] team0 (unregistering): Port device team_slave_1 removed [ 505.694799][ T55] team0 (unregistering): Port device team_slave_0 removed [ 505.747649][T28800] lo speed is unknown, defaulting to 1000 [ 505.759294][T28746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.776795][T28769] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8217'. [ 505.791931][T28746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.851844][T28746] team0: Port device team_slave_0 added [ 505.869339][T28746] team0: Port device team_slave_1 added [ 505.973147][T28746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.980165][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.006836][T28746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.042649][T28746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.049617][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.075669][T28746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.259394][T28746] hsr_slave_0: entered promiscuous mode [ 506.271961][T28746] hsr_slave_1: entered promiscuous mode [ 506.277950][T28746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.295315][T28746] Cannot create hsr debugfs directory [ 506.336111][T28769] loop4: detected capacity change from 0 to 1024 [ 506.343576][T28769] EXT4-fs: Ignoring removed nobh option [ 506.349774][T28769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 506.365405][T28769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.433878][ T55] bridge_slave_1: left allmulticast mode [ 506.439586][ T55] bridge_slave_1: left promiscuous mode [ 506.445410][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.473533][ T55] bridge_slave_0: left allmulticast mode [ 506.479286][ T55] bridge_slave_0: left promiscuous mode [ 506.485185][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.757023][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.778475][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.799006][ T55] bond0 (unregistering): Released all slaves [ 506.817592][ T55] bond1 (unregistering): Released all slaves [ 506.856201][T28827] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8230'. [ 506.867664][T27843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.877791][T28831] smc: net device wg0 applied user defined pnetid SYZ0 [ 506.898048][ T55] tipc: Left network mode [ 506.915623][T28834] loop1: detected capacity change from 0 to 128 [ 506.985759][T28840] loop4: detected capacity change from 0 to 2048 [ 507.000348][ T55] hsr_slave_0: left promiscuous mode [ 507.028365][ T55] hsr_slave_1: left promiscuous mode [ 507.028695][T28840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.054874][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.062282][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.070381][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.077848][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.090088][ T55] veth1_macvtap: left promiscuous mode [ 507.095595][ T55] veth0_macvtap: left promiscuous mode [ 507.101081][ T55] veth1_vlan: left promiscuous mode [ 507.106326][ T55] veth0_vlan: left promiscuous mode [ 507.382644][ T55] team0 (unregistering): Port device team_slave_1 removed [ 507.401008][ T55] team0 (unregistering): Port device team_slave_0 removed [ 507.427425][T28861] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 507.476876][ T55] team0 (unregistering): Port device batadv0 removed [ 507.513302][T28840] bond0: entered promiscuous mode [ 507.518465][T28840] bond_slave_0: entered promiscuous mode [ 507.524213][T28840] bond_slave_1: entered promiscuous mode [ 507.582260][T27843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.642956][T28746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 507.674011][T28746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 507.698282][T28746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 507.727178][T28746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 507.808084][T28746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.826728][T28746] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.840091][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.847250][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.881196][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.891434][ T3124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.913326][T28865] loop1: detected capacity change from 0 to 8192 [ 507.933534][T28879] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8244'. [ 507.966901][T28746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.977567][T28746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.997320][T28865] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 508.002607][T28865] loop1: partition table partially beyond EOD, truncated [ 508.033405][T28865] loop1: p1 start 277760 is beyond EOD, truncated [ 508.039979][T28865] loop1: p2 start 6684676 is beyond EOD, truncated [ 508.060806][T28865] loop1: p5 start 6684676 is beyond EOD, truncated [ 508.102498][T28746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.181561][T28898] netlink: 763 bytes leftover after parsing attributes in process `syz.4.8249'. [ 508.272424][T28904] loop4: detected capacity change from 0 to 512 [ 508.289267][T28904] EXT4-fs: Ignoring removed i_version option [ 508.297949][T28746] veth0_vlan: entered promiscuous mode [ 508.309199][T28904] EXT4-fs (loop4): 1 truncate cleaned up [ 508.325934][T28904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.342394][T28746] veth1_vlan: entered promiscuous mode [ 508.383465][T28746] veth0_macvtap: entered promiscuous mode [ 508.425901][T28746] veth1_macvtap: entered promiscuous mode [ 508.449092][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.459614][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.469527][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.480264][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.490401][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.501240][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.511299][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.521745][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.531576][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.542065][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.558263][T28746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.568792][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.579533][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.590105][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.601032][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.610960][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.621467][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.631302][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.641747][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.651571][T28746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.662032][T28746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.673004][T27843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.673795][T28746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.689605][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8251'. [ 508.701854][T28746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.710715][T28746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.719513][T28746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.728223][T28746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.752605][T28918] loop2: detected capacity change from 0 to 512 [ 508.781172][T28918] EXT4-fs: Ignoring removed i_version option [ 508.791867][T28918] EXT4-fs (loop2): 1 truncate cleaned up [ 508.799183][T28918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.874535][T28926] loop3: detected capacity change from 0 to 256 [ 508.953919][T27374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.112319][T28941] lo speed is unknown, defaulting to 1000 [ 509.179977][T28946] loop1: detected capacity change from 0 to 512 [ 509.206920][T28946] EXT4-fs (loop1): Invalid log cluster size: 67108864 [ 509.377528][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 509.377542][ T29] audit: type=1400 audit(1719490571.186:41653): avc: denied { setattr } for pid=28956 comm="syz.1.8265" name="file0" dev="sda1" ino=2201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 509.408322][T28960] tipc: MTU too low for tipc bearer [ 509.502915][T28964] loop1: detected capacity change from 0 to 512 [ 509.521418][T28964] EXT4-fs: Ignoring removed i_version option [ 509.562814][T28964] EXT4-fs (loop1): 1 truncate cleaned up [ 509.591921][T28964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.610140][T28939] loop2: detected capacity change from 0 to 65536 [ 509.809078][T28315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.093386][T28978] sctp: [Deprecated]: syz.1.8270 (pid 28978) Use of int in max_burst socket option deprecated. [ 510.093386][T28978] Use struct sctp_assoc_value instead [ 510.318211][T28983] lo speed is unknown, defaulting to 1000 [ 510.405601][ T29] audit: type=1400 audit(1719490572.216:41654): avc: denied { listen } for pid=28990 comm="syz.2.8276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 510.452390][T28995] loop2: detected capacity change from 0 to 764 [ 510.481142][T28995] vlan2: entered promiscuous mode [ 510.486678][T28995] macvlan1: entered promiscuous mode [ 510.493633][T28995] team0: Port device vlan2 added [ 510.500789][T28995] ISOFS: unable to read i-node block [ 510.569015][T29000] loop2: detected capacity change from 0 to 764 [ 510.738827][T29010] loop2: detected capacity change from 0 to 256 [ 510.871839][T29012] netlink: 'syz.4.8281': attribute type 10 has an invalid length. [ 510.980249][T29014] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 511.122848][T29019] tipc: MTU too low for tipc bearer [ 511.439427][T29034] vlan2: entered promiscuous mode [ 511.453828][T29034] macvlan1: entered promiscuous mode [ 511.472441][T29034] team0: Port device vlan2 added [ 511.778992][T29042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8291'. [ 511.901045][T29050] lo speed is unknown, defaulting to 1000 [ 512.053131][T29069] loop1: detected capacity change from 0 to 512 [ 512.062792][T29069] EXT4-fs: Ignoring removed i_version option [ 512.086992][T29069] EXT4-fs (loop1): 1 truncate cleaned up [ 512.115005][T29069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.215500][T29080] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.248445][T28315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.362024][T29084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8306'. [ 512.717230][T29098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8310'. [ 512.793886][T29100] lo speed is unknown, defaulting to 1000 [ 513.151573][T29116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8316'. [ 513.234843][T29122] loop1: detected capacity change from 0 to 764 [ 513.273227][T29122] vlan2: entered promiscuous mode [ 513.284300][T29122] macvlan1: entered promiscuous mode [ 513.300903][T29122] team0: Port device vlan2 added [ 513.322862][T29122] ISOFS: unable to read i-node block [ 513.630588][T29138] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 513.652435][T29140] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.856719][T29151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8328'. [ 514.120363][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.234387][T29161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8332'. [ 514.271167][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.320759][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.375560][T29164] lo speed is unknown, defaulting to 1000 [ 514.395564][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.506232][ T55] bridge_slave_1: left allmulticast mode [ 514.511909][ T55] bridge_slave_1: left promiscuous mode [ 514.517737][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.536898][ T55] bridge_slave_0: left allmulticast mode [ 514.542552][ T55] bridge_slave_0: left promiscuous mode [ 514.548378][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.690401][T29136] loop1: detected capacity change from 0 to 65536 [ 514.701074][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.713855][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.734765][ T55] bond0 (unregistering): Released all slaves [ 514.808800][T29164] chnl_net:caif_netlink_parms(): no params data found [ 514.932581][T29187] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 514.954580][ T55] hsr_slave_0: left promiscuous mode [ 514.992105][ T55] hsr_slave_1: left promiscuous mode [ 514.998110][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.005585][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.036672][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.044098][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.095119][ T55] veth1_macvtap: left promiscuous mode [ 515.100688][ T55] veth0_macvtap: left promiscuous mode [ 515.106235][ T55] veth1_vlan: left promiscuous mode [ 515.111486][ T55] veth0_vlan: left promiscuous mode [ 515.177179][T28612] ================================================================== [ 515.185281][T28612] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 515.193716][T28612] [ 515.196031][T28612] write to 0xffff88810692a1b0 of 8 bytes by task 29191 on cpu 1: [ 515.203755][T28612] __mark_inode_dirty+0x256/0x7e0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 515.204927][ T29] audit: type=1400 audit(1719490577.006:41655): avc: denied { shutdown } for pid=29135 comm="syz.1.8322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.208798][T28612] ext4_mb_new_blocks+0x103e/0x2020 [ 515.208829][T28612] ext4_ext_map_blocks+0x10a1/0x33b0 [ 515.239501][T28612] ext4_map_blocks+0x72a/0xf50 [ 515.244278][T28612] ext4_alloc_file_blocks+0x285/0x700 [ 515.249658][T28612] ext4_fallocate+0x782/0x1190 [ 515.254422][T28612] vfs_fallocate+0x380/0x3e0 [ 515.259020][T28612] do_vfs_ioctl+0x1481/0x1560 [ 515.263699][T28612] __se_sys_ioctl+0x81/0x150 [ 515.268282][T28612] __x64_sys_ioctl+0x43/0x50 [ 515.271684][ T29] audit: type=1400 audit(1719490577.046:41656): avc: denied { write } for pid=3066 comm="syz-executor" path="pipe:[1604]" dev="pipefs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 515.272907][T28612] x64_sys_call+0x1581/0x2d70 [ 515.300843][T28612] do_syscall_64+0xc9/0x1c0 [ 515.305361][T28612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.311265][T28612] [ 515.313582][T28612] read to 0xffff88810692a1b0 of 8 bytes by task 28612 on cpu 0: [ 515.321206][T28612] __writeback_single_inode+0x11e/0x870 [ 515.326754][T28612] writeback_sb_inodes+0x559/0xb20 [ 515.331866][T28612] wb_writeback+0x25e/0x720 [ 515.336371][T28612] wb_workfn+0x1a8/0x940 [ 515.340610][T28612] process_scheduled_works+0x483/0x9a0 [ 515.346078][T28612] worker_thread+0x526/0x720 [ 515.350684][T28612] kthread+0x1d1/0x210 [ 515.354753][T28612] ret_from_fork+0x4b/0x60 [ 515.359173][T28612] ret_from_fork_asm+0x1a/0x30 [ 515.363935][T28612] [ 515.366246][T28612] value changed: 0x0000000000020081 -> 0x0000000000020087 [ 515.373338][T28612] [ 515.375646][T28612] Repor