last executing test programs: 4.940371121s ago: executing program 3 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000004b64ffeca500000050000000260000008f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x200}}}}}}]}, 0x48}}, 0x0) 4.857976978s ago: executing program 3 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="980100001a000100000000000000000000000000000000000000ffff00000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000320000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000007ea1446400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000000c00080008000800000000041c0004000000000000000000fc01000000000000000000000000000108001600000000004c0012"], 0x198}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) 4.83190549s ago: executing program 3 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x3) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[], 0xff9d) sendfile(r2, r3, &(0x7f0000000100), 0x2) fcntl$addseals(r3, 0x409, 0x8) pwritev(r3, &(0x7f00000005c0)=[{&(0x7f00000003c0)='\v', 0x1}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.709978181s ago: executing program 3 (id=76): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x1000000201005) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0xfb3, &(0x7f0000000200)=0x0) socket$nl_generic(0x10, 0x3, 0x10) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 4.547752994s ago: executing program 2 (id=77): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x9}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000a926007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1e000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) write$cgroup_int(r0, &(0x7f0000000140)=0x400900, 0x12) 4.520347177s ago: executing program 2 (id=78): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f00000002c0)={[{@nouid32}, {@abort}]}, 0x3, 0x440, &(0x7f00000006c0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 4.348206631s ago: executing program 2 (id=80): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x2d, @private0, 0x2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffff, '\x00', 0x0, r1, 0x2, 0x2, 0x3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97000fc88900fe8000400000000000000000000000aaff020000000000000000000000000001"], 0xffe) 4.12556497s ago: executing program 3 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003840)={{0x14}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) timer_create(0x1, &(0x7f0000000340)={0x0, 0x5, 0x5, @thr={0x0, &(0x7f0000000240)="edadb0a71ec9960e62d5cccb97110e9a86"}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000046"], 0xfdef) 4.062833966s ago: executing program 2 (id=83): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") creat(&(0x7f0000000040)='./bus\x00', 0x181) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x462e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.941883636s ago: executing program 2 (id=84): set_tid_address(&(0x7f0000000380)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)="10000000000000002900000002000000", 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000002480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@filename='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x0, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x8, 0xb, 0x7f}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010100, @in6=@mcast1, 0x4e23, 0xfffd, 0x4e20, 0x0, 0xa, 0xc0, 0xa0, 0x5e, r3, r4}, {0x7, 0xd0, 0x4, 0x671775a1, 0x6, 0x81, 0x2, 0x2}, {0xb8, 0xa28a, 0x0, 0x8}, 0xfffffffe, 0x6e6bb4, 0x0, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1, 0x881ace27a0fd37d1, 0x81, 0x200, 0x5, 0xfff}}, 0xe8) 3.796671718s ago: executing program 3 (id=86): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x64100, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1800000, 0x0) gettid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3.640333961s ago: executing program 2 (id=88): r0 = socket(0x11, 0x800000003, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="02"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 2.421576084s ago: executing program 0 (id=105): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, r2) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setuid(r1) 1.610729053s ago: executing program 1 (id=110): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 1.431818158s ago: executing program 0 (id=112): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd00008e4100030006010000418e01400004fcff", 0x58}], 0x1) 1.424657749s ago: executing program 1 (id=113): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x3, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x20000, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.328450457s ago: executing program 0 (id=115): r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={[0x84b]}, 0x8) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000dc0), 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x8, 0x7f, 0x4, 0x81, 0x2, 0x2, 0x40}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) 1.110388666s ago: executing program 1 (id=117): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0x24fa, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@un=@abs}) io_uring_enter(r0, 0x4d92, 0x0, 0x0, 0x0, 0x3c000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000030000000200001304000000030000000000000b00000000030000000000df0800000000006100615f"], 0x0, 0x42}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x8020600) 1.080384418s ago: executing program 0 (id=118): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) syz_io_uring_setup(0x2f68, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x0) munmap(&(0x7f0000b05000/0x2000)=nil, 0x2000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 991.170766ms ago: executing program 0 (id=119): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x100000003}, 0x0, 0x0) 907.378313ms ago: executing program 1 (id=120): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10) 854.567207ms ago: executing program 1 (id=122): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x128, 0x17, 0x0, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2}}}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) utimes(&(0x7f0000000040)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) 684.026392ms ago: executing program 4 (id=123): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xc000) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) 620.614747ms ago: executing program 4 (id=124): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f582db44b904021d080006007c09e8fe55a10a0015400100140b03600e120800060000000401a8001600a400014003e00200036010faa94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52ff0716277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006fcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) dup(r1) 300.663674ms ago: executing program 4 (id=125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbc9280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be4200"/278, 0x116}, {&(0x7f0000000400)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814edbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1c07c8ff3ef304ed0ffedd06194dd9d022b25a4b9632856295fee3a30ef6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0dea0a2c32cd11e", 0x111}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab9", 0xc6}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da7", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d", 0x36}, {&(0x7f0000001bc0)="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", 0x1e3}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 266.110277ms ago: executing program 4 (id=126): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r1, 0xf5ffffff}}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@abort}, {@lazytime}, {@noload}, {@nojournal_checksum}, {@oldalloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x8001) socket$inet_udp(0x2, 0x2, 0x0) r3 = io_uring_setup(0x66bd, &(0x7f0000000080)={0x0, 0x32ee, 0x200, 0x1, 0x35c}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) 179.934084ms ago: executing program 4 (id=127): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0x2047ffb, 0x0, 0x11, r2, 0x0) 41.602546ms ago: executing program 4 (id=128): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) write(r3, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x5f) 482.439µs ago: executing program 1 (id=129): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) time(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 0s ago: executing program 0 (id=130): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x7, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tgkill(r3, r3, 0x12) kernel console output (not intermixed with test programs): [ 20.214174][ T29] audit: type=1400 audit(1724854197.450:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 26.538321][ T29] audit: type=1400 audit(1724854203.780:82): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.539601][ T3249] cgroup: Unknown subsys name 'net' [ 26.561515][ T29] audit: type=1400 audit(1724854203.780:83): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.588945][ T29] audit: type=1400 audit(1724854203.810:84): avc: denied { unmount } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.728486][ T3249] cgroup: Unknown subsys name 'rlimit' [ 26.851539][ T29] audit: type=1400 audit(1724854204.090:85): avc: denied { setattr } for pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.877651][ T3253] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.881053][ T29] audit: type=1400 audit(1724854204.090:86): avc: denied { create } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.906790][ T29] audit: type=1400 audit(1724854204.090:87): avc: denied { write } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.910389][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.927140][ T29] audit: type=1400 audit(1724854204.090:88): avc: denied { read } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.956659][ T29] audit: type=1400 audit(1724854204.090:89): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.981965][ T29] audit: type=1400 audit(1724854204.090:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.005657][ T29] audit: type=1400 audit(1724854204.120:91): avc: denied { relabelto } for pid=3253 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.041675][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 28.082482][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 28.144793][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.151964][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.159638][ T3265] bridge_slave_0: entered allmulticast mode [ 28.166065][ T3265] bridge_slave_0: entered promiscuous mode [ 28.191840][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.199110][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.206335][ T3265] bridge_slave_1: entered allmulticast mode [ 28.212783][ T3265] bridge_slave_1: entered promiscuous mode [ 28.251636][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.258980][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.266130][ T3261] bridge_slave_0: entered allmulticast mode [ 28.272798][ T3261] bridge_slave_0: entered promiscuous mode [ 28.281503][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.289071][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.296447][ T3261] bridge_slave_1: entered allmulticast mode [ 28.303376][ T3261] bridge_slave_1: entered promiscuous mode [ 28.316075][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.326788][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.338699][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 28.364846][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.385800][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 28.400100][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.409271][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 28.419137][ T3265] team0: Port device team_slave_0 added [ 28.431445][ T3265] team0: Port device team_slave_1 added [ 28.481961][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.489078][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.515171][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.531202][ T3261] team0: Port device team_slave_0 added [ 28.537754][ T3261] team0: Port device team_slave_1 added [ 28.548247][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.555386][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.581772][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.592746][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.599947][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.607164][ T3268] bridge_slave_0: entered allmulticast mode [ 28.613607][ T3268] bridge_slave_0: entered promiscuous mode [ 28.642845][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.650191][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.657634][ T3268] bridge_slave_1: entered allmulticast mode [ 28.664320][ T3268] bridge_slave_1: entered promiscuous mode [ 28.675436][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.682645][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.709303][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.720988][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.729377][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.755293][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.781668][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.790803][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.797896][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.805146][ T3260] bridge_slave_0: entered allmulticast mode [ 28.812063][ T3260] bridge_slave_0: entered promiscuous mode [ 28.835557][ T3265] hsr_slave_0: entered promiscuous mode [ 28.841742][ T3265] hsr_slave_1: entered promiscuous mode [ 28.848819][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.858201][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.865351][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.872982][ T3260] bridge_slave_1: entered allmulticast mode [ 28.879506][ T3260] bridge_slave_1: entered promiscuous mode [ 28.891317][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.898528][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.905637][ T3263] bridge_slave_0: entered allmulticast mode [ 28.912179][ T3263] bridge_slave_0: entered promiscuous mode [ 28.918988][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.926192][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.933402][ T3263] bridge_slave_1: entered allmulticast mode [ 28.939745][ T3263] bridge_slave_1: entered promiscuous mode [ 28.983444][ T3268] team0: Port device team_slave_0 added [ 28.990305][ T3268] team0: Port device team_slave_1 added [ 29.002895][ T3261] hsr_slave_0: entered promiscuous mode [ 29.009020][ T3261] hsr_slave_1: entered promiscuous mode [ 29.014916][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.022529][ T3261] Cannot create hsr debugfs directory [ 29.029162][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.052999][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.063349][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.096578][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.105988][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.113540][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.140128][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.156483][ T3263] team0: Port device team_slave_0 added [ 29.165840][ T3263] team0: Port device team_slave_1 added [ 29.177302][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.184324][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.211032][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.239285][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.246383][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.272321][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.289047][ T3260] team0: Port device team_slave_0 added [ 29.307174][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.314248][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.340355][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.351978][ T3260] team0: Port device team_slave_1 added [ 29.372563][ T3268] hsr_slave_0: entered promiscuous mode [ 29.378640][ T3268] hsr_slave_1: entered promiscuous mode [ 29.384579][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.392269][ T3268] Cannot create hsr debugfs directory [ 29.410587][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.417572][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.443564][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.477418][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.484387][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.510578][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.534351][ T3263] hsr_slave_0: entered promiscuous mode [ 29.540479][ T3263] hsr_slave_1: entered promiscuous mode [ 29.546586][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.554150][ T3263] Cannot create hsr debugfs directory [ 29.598024][ T3260] hsr_slave_0: entered promiscuous mode [ 29.604172][ T3260] hsr_slave_1: entered promiscuous mode [ 29.610158][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.617759][ T3260] Cannot create hsr debugfs directory [ 29.709922][ T3265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.718547][ T3265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.739505][ T3265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.750408][ T3265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.787709][ T3261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.796702][ T3261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.809725][ T3261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.819877][ T3261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.843578][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.854079][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.863253][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.878783][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.918046][ T3263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.942980][ T3263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.952321][ T3263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.962071][ T3263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.989825][ T3260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.005554][ T3260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.014777][ T3260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.023640][ T3260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.039078][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.049761][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.075878][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.090064][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.098675][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.105787][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.131694][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.138866][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.149380][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156465][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.182445][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.189557][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.208383][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.249547][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.264373][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.278613][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.290040][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.312092][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.319200][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.328903][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.336105][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.360247][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.389041][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.403451][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.410578][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.420244][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.427327][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.444158][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.461373][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.471334][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.478485][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.498678][ T3263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.529401][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.536611][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.575338][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.658862][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.689644][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.720167][ T3261] veth0_vlan: entered promiscuous mode [ 30.760606][ T3261] veth1_vlan: entered promiscuous mode [ 30.788885][ T3268] veth0_vlan: entered promiscuous mode [ 30.842480][ T3265] veth0_vlan: entered promiscuous mode [ 30.850813][ T3268] veth1_vlan: entered promiscuous mode [ 30.865715][ T3260] veth0_vlan: entered promiscuous mode [ 30.881798][ T3261] veth0_macvtap: entered promiscuous mode [ 30.892566][ T3265] veth1_vlan: entered promiscuous mode [ 30.902412][ T3261] veth1_macvtap: entered promiscuous mode [ 30.912019][ T3260] veth1_vlan: entered promiscuous mode [ 30.936224][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.945088][ T3263] veth0_vlan: entered promiscuous mode [ 30.954425][ T3263] veth1_vlan: entered promiscuous mode [ 30.961644][ T3268] veth0_macvtap: entered promiscuous mode [ 30.969953][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.985413][ T3268] veth1_macvtap: entered promiscuous mode [ 30.992739][ T3261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.001556][ T3261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.010418][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019228][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.030867][ T3260] veth0_macvtap: entered promiscuous mode [ 31.049197][ T3265] veth0_macvtap: entered promiscuous mode [ 31.056094][ T3260] veth1_macvtap: entered promiscuous mode [ 31.066028][ T3265] veth1_macvtap: entered promiscuous mode [ 31.077171][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.087754][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.098555][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.107574][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.118071][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.128938][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.145967][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.156554][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.166397][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.176849][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.187880][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.196577][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.207141][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.216981][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.227418][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.238074][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.253184][ T3263] veth0_macvtap: entered promiscuous mode [ 31.267937][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276851][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.285572][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.294400][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.305465][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.314240][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.323030][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.331831][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.341900][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.352376][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.362313][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.372893][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.382856][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.393532][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.404185][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.414382][ T3263] veth1_macvtap: entered promiscuous mode [ 31.433668][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.438831][ T3399] loop1: detected capacity change from 0 to 256 [ 31.444229][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.455911][ T3399] ======================================================= [ 31.455911][ T3399] WARNING: The mand mount option has been deprecated and [ 31.455911][ T3399] and is ignored by this kernel. Remove the mand [ 31.455911][ T3399] option from the mount to silence this warning. [ 31.455911][ T3399] ======================================================= [ 31.460333][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.506183][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.516145][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.525217][ T3399] FAT-fs (loop1): Directory bread(block 64) failed [ 31.526837][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.534151][ T3399] FAT-fs (loop1): Directory bread(block 65) failed [ 31.546499][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.557228][ T3399] FAT-fs (loop1): Directory bread(block 66) failed [ 31.559748][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.563745][ T3399] FAT-fs (loop1): Directory bread(block 67) failed [ 31.574172][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.574185][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.574201][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.574213][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.574228][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.574240][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.581097][ T3399] FAT-fs (loop1): Directory bread(block 68) failed [ 31.590577][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.616399][ T3399] FAT-fs (loop1): Directory bread(block 69) failed [ 31.623166][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.646370][ T3399] FAT-fs (loop1): Directory bread(block 70) failed [ 31.679802][ T3399] FAT-fs (loop1): Directory bread(block 71) failed [ 31.686495][ T3399] FAT-fs (loop1): Directory bread(block 72) failed [ 31.692451][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.693156][ T3399] FAT-fs (loop1): Directory bread(block 73) failed [ 31.710656][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.720490][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 31.720507][ T29] audit: type=1400 audit(1724854208.960:119): avc: denied { mount } for pid=3398 comm="syz.1.2" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.726585][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.726609][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.768624][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.779156][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.789106][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.799794][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.808462][ T29] audit: type=1400 audit(1724854209.040:120): avc: denied { open } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.812126][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.828479][ T29] audit: type=1400 audit(1724854209.040:121): avc: denied { perfmon } for pid=3398 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.828523][ T29] audit: type=1400 audit(1724854209.040:122): avc: denied { kernel } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.879462][ T3263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.888410][ T3263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.897254][ T3263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.906021][ T29] audit: type=1400 audit(1724854209.140:123): avc: denied { map_create } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.906025][ T3263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.933896][ T29] audit: type=1400 audit(1724854209.140:124): avc: denied { map_read map_write } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.955421][ T29] audit: type=1400 audit(1724854209.150:125): avc: denied { prog_load } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.974393][ T29] audit: type=1400 audit(1724854209.150:126): avc: denied { bpf } for pid=3398 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.994750][ T29] audit: type=1400 audit(1724854209.170:127): avc: denied { prog_run } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.013519][ T29] audit: type=1400 audit(1724854209.190:128): avc: denied { create } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.038944][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.047838][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.056698][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.065424][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.074731][ T59] kworker/u8:5: attempt to access beyond end of device [ 32.074731][ T59] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 32.170460][ T3408] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.180566][ T3408] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 32.272044][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 32.407102][ T3432] netlink: 'syz.3.10': attribute type 2 has an invalid length. [ 32.410033][ T3434] loop0: detected capacity change from 0 to 512 [ 32.429815][ C1] hrtimer: interrupt took 37385 ns [ 32.444600][ T3434] EXT4-fs: Ignoring removed i_version option [ 32.451934][ T3434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.465376][ T3434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.486685][ T3434] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.500805][ T3434] EXT4-fs (loop0): 1 truncate cleaned up [ 32.507442][ T3434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.569658][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.807352][ T3446] loop3: detected capacity change from 0 to 2048 [ 32.819651][ T3446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.839902][ T3446] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 32.901761][ T3449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.337329][ T3465] Â: renamed from pim6reg1 [ 33.411240][ T3471] loop4: detected capacity change from 0 to 128 [ 33.423535][ T3471] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.443911][ T3471] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.456651][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.471903][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.484882][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.500291][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.513264][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.528624][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.541398][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.552330][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811570ec00: rx timeout, send abort [ 33.556635][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.564808][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811570ee00: rx timeout, send abort [ 33.584822][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811570ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.591784][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.599103][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811570ee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.628607][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.645634][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.650510][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.660881][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.715632][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.730916][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.745030][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.760293][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.774712][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.790018][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.802971][ T3471] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.25: No space for directory leaf checksum. Please run e2fsck -D. [ 33.818454][ T3471] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.25: checksumming directory block 0 [ 33.845458][ T3265] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.925664][ T3485] syz.0.30 (3485) used greatest stack depth: 11000 bytes left [ 33.952141][ T3492] loop0: detected capacity change from 0 to 512 [ 33.978188][ T3492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.990830][ T3492] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.016831][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.304430][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 34.443968][ T3519] syzkaller0: entered promiscuous mode [ 34.449587][ T3519] syzkaller0: entered allmulticast mode [ 34.624606][ T3529] Zero length message leads to an empty skb [ 34.624627][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 34.665857][ T3531] loop1: detected capacity change from 0 to 2048 [ 34.688123][ T3531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.702790][ T3531] EXT4-fs error (device loop1): ext4_ext_precache:645: inode #2: comm syz.1.47: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 34.763937][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.780995][ T3538] loop4: detected capacity change from 0 to 256 [ 34.788799][ T3538] vfat: Bad value for 'fmask' [ 34.913402][ T3550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 34.924039][ T3550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 34.965506][ T3553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'. [ 34.997829][ T3553] sch_tbf: burst 88 is lower than device team0 mtu (1514) ! [ 35.731767][ T3646] loop1: detected capacity change from 0 to 128 [ 35.732872][ T3645] veth2: entered allmulticast mode [ 35.768390][ T3646] syz.1.65: attempt to access beyond end of device [ 35.768390][ T3646] loop1: rw=0, sector=97, nr_sectors = 944 limit=128 [ 35.807281][ T3648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.840336][ T3652] 9pnet_fd: p9_fd_create_unix (3652): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 35.953725][ T3668] loop3: detected capacity change from 0 to 512 [ 35.954472][ T3665] syzkaller0: entered promiscuous mode [ 36.050281][ T3668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.051898][ T3665] syzkaller0: entered allmulticast mode [ 36.058531][ T3668] EXT4-fs (loop3): 1 truncate cleaned up [ 36.080369][ T3668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.144491][ T3675] loop2: detected capacity change from 0 to 512 [ 36.152211][ T3675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.158387][ T3668] loop3: detected capacity change from 512 to 11 [ 36.175571][ T3668] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 36.191837][ T3668] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.76: mark_inode_dirty error [ 36.206743][ T3668] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 36.216153][ T3668] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.76: mark_inode_dirty error [ 36.238452][ T3675] EXT4-fs (loop2): 1 truncate cleaned up [ 36.261999][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.284751][ T3668] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 36.309636][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.321062][ T3668] EXT4-fs error (device loop3): ext4_splice_branch:479: inode #18: comm syz.3.76: mark_inode_dirty error [ 36.336383][ T3668] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 36.345752][ T3668] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.76: mark_inode_dirty error [ 36.360013][ T3668] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 36.383763][ T3684] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET) [ 36.395886][ T3668] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 36.522768][ T3668] syz.3.76 (3668) used greatest stack depth: 10960 bytes left [ 36.523580][ T3260] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 36.552109][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.603134][ T3689] loop2: detected capacity change from 0 to 512 [ 36.610026][ T3689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.627924][ T3689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.641175][ T3689] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.686357][ T3689] loop2: detected capacity change from 512 to 511 [ 36.694846][ T3689] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.83: Failed to acquire dquot type 1 [ 36.714761][ T3268] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 4: comm syz-executor: path /11/file0: bad entry in directory: directory entry overrun - offset=992, inode=2, rec_len=1012, size=1024 fake=1 [ 36.736472][ T3268] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 36.748412][ T3268] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 36.770580][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 36.770655][ T29] audit: type=1400 audit(1724854214.010:272): avc: denied { unmount } for pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 36.798569][ T29] audit: type=1400 audit(1724854214.040:273): avc: denied { unmount } for pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.831859][ T2031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.843787][ T29] audit: type=1400 audit(1724854214.090:274): avc: denied { map } for pid=3693 comm="syz.0.85" path="socket:[4201]" dev="sockfs" ino=4201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.866599][ T29] audit: type=1400 audit(1724854214.090:275): avc: denied { read } for pid=3693 comm="syz.0.85" path="socket:[4201]" dev="sockfs" ino=4201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.893831][ T29] audit: type=1400 audit(1724854214.130:276): avc: denied { mounton } for pid=3695 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.920494][ T2031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.989871][ T2031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.998166][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.075385][ T3695] chnl_net:caif_netlink_parms(): no params data found [ 37.090884][ T2031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.144909][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.152172][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.159525][ T3695] bridge_slave_0: entered allmulticast mode [ 37.165929][ T3695] bridge_slave_0: entered promiscuous mode [ 37.173395][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.180762][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.188211][ T3695] bridge_slave_1: entered allmulticast mode [ 37.194808][ T3695] bridge_slave_1: entered promiscuous mode [ 37.231726][ T3695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.253892][ T3695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.285228][ T2031] bridge_slave_1: left allmulticast mode [ 37.290991][ T2031] bridge_slave_1: left promiscuous mode [ 37.296810][ T2031] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.315808][ T29] audit: type=1400 audit(1724854214.550:277): avc: denied { bind } for pid=3729 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.335090][ T29] audit: type=1400 audit(1724854214.550:278): avc: denied { name_bind } for pid=3729 comm="syz.1.92" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 37.344253][ T3736] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 37.355649][ T29] audit: type=1400 audit(1724854214.550:279): avc: denied { node_bind } for pid=3729 comm="syz.1.92" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 37.384271][ T29] audit: type=1400 audit(1724854214.550:280): avc: denied { listen } for pid=3729 comm="syz.1.92" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.404570][ T29] audit: type=1400 audit(1724854214.550:281): avc: denied { connect } for pid=3729 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.424754][ T2031] bridge_slave_0: left allmulticast mode [ 37.430527][ T2031] bridge_slave_0: left promiscuous mode [ 37.436312][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.538823][ T2031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.549511][ T2031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.560067][ T2031] bond0 (unregistering): Released all slaves [ 37.592794][ T3695] team0: Port device team_slave_0 added [ 37.601207][ T3695] team0: Port device team_slave_1 added [ 37.627334][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.634342][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.660411][ T3695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.676950][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.683920][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.709907][ T3695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.725780][ T2031] hsr_slave_0: left promiscuous mode [ 37.731453][ T2031] hsr_slave_1: left promiscuous mode [ 37.737481][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.744880][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.752759][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.760665][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.770423][ T2031] veth1_macvtap: left promiscuous mode [ 37.775906][ T2031] veth0_macvtap: left promiscuous mode [ 37.781517][ T2031] veth1_vlan: left promiscuous mode [ 37.786838][ T2031] veth0_vlan: left promiscuous mode [ 37.874909][ T2031] team0 (unregistering): Port device team_slave_1 removed [ 37.887485][ T2031] team0 (unregistering): Port device team_slave_0 removed [ 37.950342][ T3695] hsr_slave_0: entered promiscuous mode [ 37.956463][ T3695] hsr_slave_1: entered promiscuous mode [ 37.962444][ T3695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.971351][ T3695] Cannot create hsr debugfs directory [ 38.078157][ T3709] chnl_net:caif_netlink_parms(): no params data found [ 38.145341][ T3729] dccp_close: ABORT with 32 bytes unread [ 38.201238][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.201894][ T3788] loop1: detected capacity change from 0 to 1024 [ 38.208410][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.215109][ T3788] EXT4-fs: Ignoring removed nobh option [ 38.227601][ T3788] EXT4-fs: Ignoring removed orlov option [ 38.235895][ T3709] bridge_slave_0: entered allmulticast mode [ 38.242675][ T3709] bridge_slave_0: entered promiscuous mode [ 38.249958][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.257179][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.264891][ T3709] bridge_slave_1: entered allmulticast mode [ 38.265688][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.272268][ T3709] bridge_slave_1: entered promiscuous mode [ 38.361157][ T3709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.650547][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.668776][ T3795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 38.714867][ T3709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.764362][ T3709] team0: Port device team_slave_0 added [ 38.775279][ T3709] team0: Port device team_slave_1 added [ 38.812984][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.820013][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.845968][ T3709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.858118][ T3813] loop1: detected capacity change from 0 to 1024 [ 38.863460][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.871479][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.897438][ T3709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.930261][ T2031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.944255][ T3813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.958395][ T3814] mmap: syz.0.105 (3814) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.002797][ T3709] hsr_slave_0: entered promiscuous mode [ 39.022851][ T3709] hsr_slave_1: entered promiscuous mode [ 39.034803][ T3709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.046983][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.061971][ T3709] Cannot create hsr debugfs directory [ 39.084759][ T2031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.116003][ T3825] Illegal XDP return value 4294967274 on prog (id 34) dev N/A, expect packet loss! [ 39.164528][ T3695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.208890][ T3695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.232933][ T2031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.260132][ T3844] loop1: detected capacity change from 0 to 512 [ 39.271767][ T3695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.280448][ T3844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.296804][ T3695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.322661][ T3844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.337974][ T3844] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.355209][ T2031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.376356][ T3844] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 39.391267][ T3844] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 39.403961][ T3844] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.403961][ T3844] [ 39.413628][ T3844] EXT4-fs (loop1): Total free blocks count 0 [ 39.419713][ T3844] EXT4-fs (loop1): Free/Dirty block details [ 39.425622][ T3844] EXT4-fs (loop1): free_blocks=39626 [ 39.430995][ T3844] EXT4-fs (loop1): dirty_blocks=1 [ 39.436039][ T3844] EXT4-fs (loop1): Block reservation details [ 39.442111][ T3844] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 39.458418][ T3854] geneve2: entered promiscuous mode [ 39.463704][ T3854] geneve2: entered allmulticast mode [ 39.487282][ T3844] syz.1.113 (3844) used greatest stack depth: 10296 bytes left [ 39.511607][ T3865] loop4: detected capacity change from 0 to 512 [ 39.551525][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.555850][ T3695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.577334][ T3865] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.116: iget: bogus i_mode (0) [ 39.593962][ T2031] bridge_slave_1: left allmulticast mode [ 39.599753][ T2031] bridge_slave_1: left promiscuous mode [ 39.605515][ T2031] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.629470][ T3865] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.116: couldn't read orphan inode 17 (err -117) [ 39.671767][ T2031] bridge_slave_0: left allmulticast mode [ 39.677476][ T2031] bridge_slave_0: left promiscuous mode [ 39.683189][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.695511][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.730449][ T3860] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.116: bg 0: block 7: invalid block bitmap [ 39.781787][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.900097][ T2031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.911228][ T2031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.923845][ T2031] bond0 (unregistering): Released all slaves [ 39.944211][ T3893] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.961114][ T3695] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.978572][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.983461][ T3898] capability: warning: `syz.4.123' uses deprecated v2 capabilities in a way that may be insecure [ 39.985688][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.020480][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.027615][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.044023][ T3900] netlink: 'syz.4.124': attribute type 21 has an invalid length. [ 40.058059][ T2031] hsr_slave_0: left promiscuous mode [ 40.065080][ T2031] hsr_slave_1: left promiscuous mode [ 40.084222][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.091760][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.101783][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.109362][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.134353][ T2031] veth1_macvtap: left promiscuous mode [ 40.140039][ T2031] veth0_macvtap: left promiscuous mode [ 40.145716][ T2031] veth1_vlan: left promiscuous mode [ 40.150987][ T2031] veth0_vlan: left promiscuous mode [ 40.337895][ T2031] team0 (unregistering): Port device team_slave_1 removed [ 40.348588][ T2031] team0 (unregistering): Port device team_slave_0 removed [ 40.404502][ T3919] loop4: detected capacity change from 0 to 1024 [ 40.413052][ T3919] EXT4-fs: Ignoring removed oldalloc option [ 40.431835][ T3919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.479239][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.545252][ T3709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.569611][ T3709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.591700][ T3695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.607099][ T3709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.621094][ T3709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.683468][ T3251] ================================================================== [ 40.691608][ T3251] BUG: KCSAN: data-race in generic_fillattr / shmem_symlink [ 40.698914][ T3251] [ 40.701248][ T3251] write to 0xffff8881043f86b0 of 8 bytes by task 3506 on cpu 0: [ 40.708880][ T3251] shmem_symlink+0x33c/0x3a0 [ 40.713488][ T3251] vfs_symlink+0xca/0x1d0 [ 40.717821][ T3251] do_symlinkat+0xe3/0x350 [ 40.722238][ T3251] __x64_sys_symlink+0x50/0x60 [ 40.727015][ T3251] x64_sys_call+0x2819/0x2d60 [ 40.731703][ T3251] do_syscall_64+0xc9/0x1c0 [ 40.736223][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.742128][ T3251] [ 40.744450][ T3251] read to 0xffff8881043f86b0 of 8 bytes by task 3251 on cpu 1: [ 40.751989][ T3251] generic_fillattr+0x199/0x2f0 [ 40.756845][ T3251] shmem_getattr+0x17b/0x200 [ 40.761446][ T3251] vfs_getattr+0x19b/0x1e0 [ 40.765868][ T3251] vfs_statx+0x134/0x2f0 [ 40.770114][ T3251] vfs_fstatat+0xec/0x110 [ 40.774448][ T3251] __se_sys_newfstatat+0x58/0x260 [ 40.779498][ T3251] __x64_sys_newfstatat+0x55/0x70 [ 40.784531][ T3251] x64_sys_call+0x141f/0x2d60 [ 40.789216][ T3251] do_syscall_64+0xc9/0x1c0 [ 40.793736][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.799639][ T3251] [ 40.801997][ T3251] value changed: 0x0000000066cf2fc3 -> 0x0000000066cf2fc9 [ 40.809097][ T3251] [ 40.811419][ T3251] Reported by Kernel Concurrency Sanitizer on: [ 40.817583][ T3251] CPU: 1 UID: 0 PID: 3251 Comm: udevd Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 40.827824][ T3251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.837880][ T3251] ================================================================== [ 40.858996][ T3709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.869956][ T3336] IPVS: starting estimator thread 0... [ 40.887736][ T3709] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.910914][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.918034][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.932544][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.939643][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.956702][ T3953] IPVS: using max 1968 ests per chain, 98400 per kthread [ 40.981412][ T3695] veth0_vlan: entered promiscuous mode [ 40.992339][ T3695] veth1_vlan: entered promiscuous mode [ 41.008722][ T3695] veth0_macvtap: entered promiscuous mode [ 41.019454][ T3695] veth1_macvtap: entered promiscuous mode [ 41.031874][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.042633][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.052563][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.063067][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.072985][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.083435][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.094484][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.103701][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.114307][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.124265][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.134721][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.144541][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.155078][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.166256][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.182263][ T3695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.191041][ T3695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.199819][ T3695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.208568][ T3695] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.224647][ T3709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.310385][ T3709] veth0_vlan: entered promiscuous mode [ 41.318652][ T3709] veth1_vlan: entered promiscuous mode [ 41.334031][ T3709] veth0_macvtap: entered promiscuous mode [ 41.341511][ T3709] veth1_macvtap: entered promiscuous mode [ 41.352581][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.363091][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.372965][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.383505][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.393544][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.404050][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.413922][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.424354][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.435245][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.446912][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.457529][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.467466][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.478172][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.488007][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.498443][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.508286][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.518848][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.529831][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.542534][ T3709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.551361][ T3709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.560179][ T3709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.568957][ T3709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.838369][ T983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 43.849225][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration