last executing test programs: 6.795467837s ago: executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x9, [@datasec={0x5, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x4, 0x7}, {0x800003, 0x6, 0x221}, {0x4, 0x6, 0x1}], "9a01"}]}, {0x0, [0x3f, 0x2e, 0x5f, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000500)=""/224, 0x55, 0xe0, 0x1}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x541b, &(0x7f0000000ec0)) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6f, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x2, 0xaa, "a806", "f09a6035a96b98bcecbd4b7caa6d30303dadca535c261331867cb0a995bee8cf300d5549cf45b783c907fb605cc825dbcb936560bbb8f1383a54a1281610f98d1bcd7d52f253e6ec81dbe3f15321795a25cd11b5a7"}}}}}, &(0x7f0000000200)={0x0, 0x82, [0xa8a, 0xb52, 0x43, 0xcf2]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r5, 0x541a, 0xfffffffffffffffe) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x2a, &(0x7f0000000080)=@gcm_256={{}, "cdaebb810c3ab92e", "8409ba60de797559778fa4f9aafafdb55c03758e60a6f23e55ecbf3b974bdf86", "4f831719", "49451ebb79a28d38"}, 0x38) r9 = socket(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x79}}], 0x58}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) accept4$inet6(r9, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x80000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) 5.912363103s ago: executing program 2: socket$pptp(0x18, 0x1, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x1f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_read_part_table(0x59c, &(0x7f0000000b80)="$eJzs0r1LXGkUB+BzL4TZYsNICKTIFoEMqSYJTIqkmCmCTIZpMhKyIUXqQAotBAsLGRmt/fgHFL9AbMR+SnEEURgrmVKsFxSbqWbZ9W5jtbKobHie5vKec+49vPxu8L+Wxh+DwSCJiEHu5m//vlX9UH828v7T54gkvkVE9bdf/+4k2cQ/X93Jzo3sXM+VuisHwxdbQ4fPjzuFtTTrt9OI6YgYPV3P/9e78fPbruzlZ2bHa3OTlR8ntamzN99fVp/OV8cW366Wm1+elL9mP1Y7vZv9he67jaNB43zp4asHnW6/tJ/NFZPb2c/9up7/8uNWr9X/+GJz4nXxUW+3uZDlfil/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADglm1X9vIzs+O1ucnKj5Pa1Nmb7y+rT+erY4tvV8vNL0/KX9OruXZ6N/sL3XcbR4PG+dLDVw863X5pP5srJrezn/t1Pf/lx61eq//xxebE6+Kj3m5zIYn4JSIu5Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EvVD/VnI+8/fY5I4ltEDKdD63/VB7mrfpLN7WTPRlav50rdlYPhi62hw+fHncLaSFZvpxHTETF6up6/88twY38GAAD//+Lhh1M=") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r0 = syz_io_uring_complete(0x0) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @hyper}, 0x10) (async, rerun: 64) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_delrule={0x50, 0x21, 0x100, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x2a9efc1422557e45, 0x2}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg\x00'}, @FRA_DST={0x8, 0x1, @private=0xa010102}, @FRA_TUN_ID={0xc}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4000810) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) fcntl$setpipe(r1, 0x407, 0x0) 5.62848321s ago: executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f51f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000400)='GPL\x00', 0x480000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xb, 0x103ba, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$UHID_INPUT(r3, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x10, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdfffff70f40"], 0x44}}, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') (async, rerun: 32) r7 = inotify_init() (rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f00000003c0)) (async) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000240)=""/166, 0xa6}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000080), 0xffffffffffffffc1, 0x400) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.470787177s ago: executing program 2: socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0xa, 0x0, 0x0) socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 5.398665838s ago: executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x2, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ppoll(0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 5.245921893s ago: executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=@gettaction={0x13c, 0x32, 0x1, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab97}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe931}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x13c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa}}, 0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1.99639019s ago: executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x35, 0x0, 0x0, 0x5}, {0x35, 0x0, 0x20, 0xe12a}, {0x16}]}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x7, 0xee, 0x3f, 0x2}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) (async) ftruncate(0xffffffffffffffff, 0xc17a) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000200010002dbd7000fcdbdf250214800780f9ff051200000008000b0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000016c0), 0x3af4701e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500010000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000dc74585ecc0849004301159a295af4e5390db39f5fdd6f16db7479b7c858ac5dc1a8d3f3822c256b68fe3bba6726657cba7cbaa9e55c0e280508718ad4fece0785379099ec49272c436cf2c105b04b6d96373ad118456ee88a51334be8bfaa28ccad7147f8c08198fe55598cfcaf54de04dc73c162461dad82f79e7193505dbed4ed7bed916747fd991d7e3b85ec9fee941656c155670df85a8a9a00685781844ecd0f590b8fcf131b8068db65c3c7aab110d560fd9dad78", @ANYRESOCT=r0, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab000000000008000b000000000006001100ffff0000"], 0x4c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'gre0\x00'}) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) 1.945124509s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x3, 0x8000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000480)={0x2, 0x0, 0x98, &(0x7f00000003c0)={0x66, 0x8001, 0xa}}) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) (async) syz_io_uring_setup(0x4ee7, &(0x7f0000000100)={0x0, 0x0, 0x2}, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) connect$netlink(r4, &(0x7f0000000200)=@unspec, 0xfffffffffffffc61) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001200010000000000ff1033e307000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730"], 0x34}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d}, {0x4}, {0x6}]}, 0x10) (async, rerun: 32) r5 = signalfd4(r0, &(0x7f0000000000)={[0x20]}, 0x8, 0x800) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044010}, 0x8000) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x30) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.892415598s ago: executing program 4: socket$key(0xf, 0x3, 0x2) r0 = eventfd(0x800a6) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) dup(r1) read$eventfd(r0, &(0x7f0000000040), 0x8) mlockall(0x3) mlockall(0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) (async) eventfd(0x800a6) (async) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) (async) dup(r1) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) mlockall(0x3) (async) mlockall(0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) (async) 1.889329208s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x8}, 0xc) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x0) sendto$packet(r3, &(0x7f0000000440)="400000000000000006004788aa96a13bb100000000000800400f", 0x1a, 0x0, &(0x7f0000000140), 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.69317978s ago: executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) getrlimit(0xc, &(0x7f0000000540)) setuid(0x0) sendfile(r3, r4, 0x0, 0xe065) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c80)=[{{&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000380), 0x0, &(0x7f0000000400)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x30, 0x8004}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000600)="f358d18f88f24b89ad54253334ccb5abdd2303805e3d709735f0592bfbff", 0x1e}], 0x1, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}], 0x88, 0x4000}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c80)="014b1f807a8ed1e5c35924976e01b75f15622963f6d8151ad2649ec7c1a471c5e61183498cbf0228a921ac0cf74265be8f6143d677d0232a8f172d793924c35e4df5751e1ff3df8564a038c95aa14047bc2a9e8b913312b9ea97334218e2523f7433e82f0eb4cd9780ec033bcc980d74bc297f83578e49ee6bc66cc530f3bea08f4a382d2e725e", 0x87}], 0x2, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}], 0x130, 0x800}}, {{&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f00000010c0)="7500e21bd1dbdcd49ef86e64c5", 0xd}], 0x1, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x8080}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d40)}], 0x1, &(0x7f0000003040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x40}}, {{&(0x7f0000003100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000003300)="1f2d20b91d3cff628d7642031b1131a26dfad77f8fb2fa8af90c7efc944feae45d9738f04274d5f6418540dd85aa1f8e1b7f502d6c7ec46eda314a57c0f5f18545467e7973c3d819f9f3f74e3217a1bb5cc1b4438ed5dba8c90e2ee7b9fb64cf67b17c52629c99ab6700b22480aeb0a7279b4a49328c7c0314abdfe520", 0x7d}], 0x2, &(0x7f0000003580)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x38, 0x4010}}], 0x6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x0, 0x0, 0xfa, 0x0, 0x7fd7, 0x1248, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000002c0), 0x5}, 0x100000, 0xfffffffffffffff7, 0x142b852d, 0x0, 0x6, 0x800, 0x9, 0x0, 0xce, 0x0, 0xfffffffffffffeff}, 0x0, 0x10, r3, 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 1.645068988s ago: executing program 3: socket(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x5, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x84}, {0x6}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000240), &(0x7f00000002c0)=ANY=[], 0x4, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4}, 0xc) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000140)) 1.411764717s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_emit_ethernet(0x9e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendfile(r0, r1, 0x0, 0xffffffff002) 1.350635246s ago: executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000023000000000000000000850000004100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x127e) 1.296083426s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x44}, {0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@random="5b1a033f2511", @remote, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x804, @igmp={{0x8, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x4}, @generic={0x0, 0x8, "d0c3165acafd"}]}}, {0x0, 0x0, 0x0, @private=0xa010100}}}}}, 0x0) 1.253386463s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009700f0fff7ffffff160000000000001195"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) (async) syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000100), &(0x7f0000003580)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x1000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x0, 0x0, 0x0, 0x46}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f2c24b32cbf5d4be94bd51f7ad82ff63c5450fb6e91e9f1a143ecfad96d659d730067c48647c3443e9d1e45c09813585d257cd17510a26b5db2b8213b7431838fe0e38f41a4282927b5e7ec6b7230d2580eb9192e4f7616eb688e61165bda168479696cd070532375302a0f823f5c74103ed364843e8353b73270dcbbf6edc71f251eb33"], 0x0, 0xa02, &(0x7f0000000e40)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async, rerun: 32) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) (rerun: 32) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) 1.099954188s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000b00)="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"}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000045c0)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0xa, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mlockall(0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000100), 0x0, 0x0) 1.062636734s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 832.452482ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 801.458648ms ago: executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/210, 0xd2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 766.619743ms ago: executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2}}, 0x28}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010004b040000000000c3e5007a000000", @ANYRES32=r5, @ANYBLOB="0000000040200200240012800b000100627269646765"], 0x80}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffff2c00000000002f107800000000e0000001000088be00188d78040000000000000000000000000000003997000000001000000000000000"], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000001c0)=0xb2) dup2(r0, r6) 681.597147ms ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002f40)={0x0, 0xc, &(0x7f0000002ec0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000006600ad050000000000"], 0x24}], 0x1}, 0x0) 652.721122ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4040881) sendmsg$inet(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="11", 0x1}], 0x1}, 0x0) sendmsg(r4, &(0x7f0000003d40)={0x0, 0x7fffefff, &(0x7f0000002c80)=[{&(0x7f0000002980)='j', 0x1}], 0x300}, 0x0) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) listen(r1, 0x20003f) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x1, &(0x7f0000000180)={[0x1000]}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 635.072295ms ago: executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xff00) 528.874532ms ago: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_emit_ethernet(0x9e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendfile(r0, r1, 0x0, 0xffffffff002) 520.709404ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21000e, &(0x7f00000026c0), 0xe1, 0x525, &(0x7f00000001c0)="$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") bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x0, 0x110) clock_gettime(0x0, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffffff, &(0x7f00000006c0)='./file0/file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) 275.299464ms ago: executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c6572726f72733d72656d6f756e742d726f2c757466383d302c696f636861727365743d757466010000006f72746e616d653d6c6f7765722c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c726f6469722c00"], 0x1, 0x220, &(0x7f0000000b00)="$eJzs3T9rU18YB/Cnv/75lYIkg1AUwSsuTqGpOJsiFcSAomTQyWJTlCYWDAR0aN18E/oWdHQVHMTVNyCCVMHFbh2ESL2xaWtiI5hcMZ/P0od7zvfe59yGXDLk5NaJ+uryWmNla2szpqfHYqIUpdgei3z8F+ORehQAwL9ku9WKL61U1r0AAMPh+Q8Ao6fP5//VIbYEAAyYz/8AMHqu37h5eaFcXryWJNMR9cfNSrOS/k3HF1bibtSiGnORi68RrV1pffFSeXEu2fExH5X6Rju/0ayM788XIxf57vliktqfn4yZdv7dTFRjPnJxtHt+vmt+Ks6c3nP9QuTi7e1Yi1osx062k18vJsmFK+UD+f+/zwMAAAAAAAAAAAAAAAAAAAAAgEEoJLu67t9TKPQaT/P97w90cH+eiTg+ke3aAQAAAAAAAAAAAAAAAAAA4G/RePBwdalWq97/VXHvzbNXh835qZiKbkNj7ev2f55BFUdOfXjSa874792fP1u8PJnlbemzeL1559jZxuy5zNqYjIg9R86nR3q+tD7nIgbUz/NM/xc/Vn3o5NmnpaUX6+8/9Xvmob8VAQAAAAAAAAAAAAAAAADAyOt86TfrTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO53f/x9ckfUaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWwAAAP//lbacqw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/42, 0x2a) getdents64(r1, 0xfffffffffffffffe, 0x29) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 36.262914ms ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) (async) rename(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000280)='./file0\x00') (async, rerun: 32) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 32) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='qdisc_create\x00'}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x3c}, {0x6}]}, 0x10) (async) r6 = fcntl$dupfd(r4, 0x0, r5) sendto$packet(r6, &(0x7f0000000000)="0400e7de", 0x4, 0x80, 0x0, 0x0) (async, rerun: 64) r7 = epoll_create1(0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x280, 0x0, 0xffffffff, 0x348, 0x0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f00000001c0), {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'veth0\x00', 'bridge0\x00', {}, {0xff}, 0xb6, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1, 0x7, 0x2, 0x7, 0x3], 0x1, 0x2}, {0x3, [0x0, 0x1, 0x6, 0x4, 0x4, 0x1], 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x5, 0x4, [0x16, 0xc, 0x1a, 0x2e, 0x13, 0x14, 0x11, 0x19, 0x3a, 0x18, 0x35, 0xc, 0x1c, 0x1d, 0x15, 0x7], 0x2, 0x9, 0x2}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "cb2c", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@loopback, @ipv4=@loopback, @gre_key=0x4, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x9, @gre_key=0x4934}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) (async) epoll_pwait(r7, &(0x7f0000001280)=[{}], 0x1, 0xb04, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000000)={0xa0002004}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000006d900008500000023000000c50000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) (async) perf_event_open(&(0x7f0000000b40)={0x5, 0x80, 0x2, 0x9, 0x5, 0x4, 0x0, 0x7f, 0x984c5, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000b00)}, 0x100004, 0x9, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x25c0}, r1, 0x10, r6, 0xb) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) 30.953835ms ago: executing program 4: perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0x20, &(0x7f0000000200)="2e193f8fe4142470a4c1328dea8db1859d5cece882495405a1eaf67c6bff7f28"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x8011) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc02000000000000000000000000000000000000000000000000ffffe00000020000000000000000000000000000000081a3cf4efb73a84ec813e23dc38728fddce16f32a2f2db37615d2705dc6621dd61fdd7e1541434d11cff25ae681ec3bc6dd0d097f8cd3de68a2bd80d20ab33f958a6dcda481e0918990d67946a554355257e91403c12265077423507786dffecb2fc14ac9de3611955d6fea55c694dea971bb369b2c3aa8e5af693e642d3f64ddb061053c46b205020ad076ea36c565f492b969eeacd3b2185", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0520000"], 0xf8}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000600)=ANY=[], 0x6, 0x2c0, &(0x7f00000008c0)="$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") semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 0s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r0, 0x67e, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x63f8, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @private1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @remote, 0x5}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 3245][ T8952] loop4: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 175.545294][ T8947] pim6reg1: entered allmulticast mode [ 175.551002][ T8952] syz-executor.4: attempt to access beyond end of device [ 175.551002][ T8952] loop4: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 175.566499][ T8952] syz-executor.4: attempt to access beyond end of device [ 175.566499][ T8952] loop4: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 175.583023][ T8947] pim6reg1: entered promiscuous mode [ 175.608129][ T8968] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 175.618136][ T8952] syz-executor.4: attempt to access beyond end of device [ 175.618136][ T8952] loop4: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 175.632523][ T8952] syz-executor.4: attempt to access beyond end of device [ 175.632523][ T8952] loop4: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 175.648269][ T8952] syz-executor.4: attempt to access beyond end of device [ 175.648269][ T8952] loop4: rw=0, sector=33, nr_sectors = 1 limit=0 [ 175.722985][ T8952] FAT-fs (loop4): Directory bread(block 33) failed [ 175.735661][ T8952] syz-executor.4: attempt to access beyond end of device [ 175.735661][ T8952] loop4: rw=0, sector=34, nr_sectors = 1 limit=0 [ 175.764293][ T8975] loop2: detected capacity change from 0 to 2048 [ 175.764476][ T8952] FAT-fs (loop4): Directory bread(block 34) failed [ 175.801676][ T8977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8977 comm=syz-executor.0 [ 175.815177][ T8952] FAT-fs (loop4): Directory bread(block 35) failed [ 175.821794][ T8952] FAT-fs (loop4): Directory bread(block 36) failed [ 175.831415][ T8952] FAT-fs (loop4): Directory bread(block 37) failed [ 175.843981][ T8952] FAT-fs (loop4): Directory bread(block 38) failed [ 175.875101][ T8952] FAT-fs (loop4): Directory bread(block 39) failed [ 175.889008][ T8952] FAT-fs (loop4): Directory bread(block 40) failed [ 175.909267][ T8975] loop2: unable to read partition table [ 175.924156][ T8975] loop2: partition table beyond EOD, truncated [ 175.930372][ T8975] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 175.941894][ T8702] FAT-fs (loop4): Directory bread(block 33) failed [ 175.957597][ T8702] FAT-fs (loop4): Directory bread(block 34) failed [ 176.006884][ T8702] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 176.067213][ T8987] all: renamed from lo (while UP) [ 176.073386][ T29] audit: type=1400 audit(1717517073.384:2617): avc: denied { ioctl } for pid=8986 comm="syz-executor.2" path="socket:[35323]" dev="sockfs" ino=35323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.154726][ T8992] loop3: detected capacity change from 0 to 256 [ 176.159789][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.192056][ T8997] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 176.202931][ T8993] sch_tbf: burst 511 is lower than device veth0_to_bridge mtu (1514) ! [ 176.261992][ T9003] loop2: detected capacity change from 0 to 128 [ 176.269584][ T9005] loop3: detected capacity change from 0 to 128 [ 176.336242][ T9005] loop3: detected capacity change from 128 to 0 [ 176.343818][ T9005] FAT-fs (loop3): Directory bread(block 33) failed [ 176.354288][ T9003] loop2: detected capacity change from 128 to 0 [ 176.361396][ T9003] FAT-fs (loop2): Directory bread(block 33) failed [ 176.371377][ T9003] FAT-fs (loop2): Directory bread(block 34) failed [ 176.372189][ T9005] FAT-fs (loop3): Directory bread(block 34) failed [ 176.386324][ T9005] FAT-fs (loop3): Directory bread(block 35) failed [ 176.393034][ T9005] FAT-fs (loop3): Directory bread(block 36) failed [ 176.394089][ T9003] FAT-fs (loop2): Directory bread(block 35) failed [ 176.399677][ T9005] FAT-fs (loop3): Directory bread(block 37) failed [ 176.407516][ T9003] FAT-fs (loop2): Directory bread(block 36) failed [ 176.415657][ T9005] FAT-fs (loop3): Directory bread(block 38) failed [ 176.427200][ T9005] FAT-fs (loop3): Directory bread(block 39) failed [ 176.434838][ T9003] FAT-fs (loop2): Directory bread(block 37) failed [ 176.436891][ T9000] pim6reg1: entered allmulticast mode [ 176.441666][ T9003] FAT-fs (loop2): Directory bread(block 38) failed [ 176.446924][ T9005] FAT-fs (loop3): Directory bread(block 40) failed [ 176.454713][ T9003] FAT-fs (loop2): Directory bread(block 39) failed [ 176.463754][ T9000] pim6reg1: entered promiscuous mode [ 176.466768][ T9003] FAT-fs (loop2): Directory bread(block 40) failed [ 176.492416][ T8304] FAT-fs (loop2): Directory bread(block 33) failed [ 176.505116][ T8589] FAT-fs (loop3): Directory bread(block 33) failed [ 176.511657][ T8589] FAT-fs (loop3): Directory bread(block 34) failed [ 176.529480][ T8304] FAT-fs (loop2): Directory bread(block 34) failed [ 176.537165][ T8589] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 176.547265][ T8304] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 176.601032][ T9017] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 176.625791][ T9017] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.636506][ T9017] bond0: (slave team0): Enslaving as an active interface with an up link [ 176.649953][ T9022] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 176.659369][ T9022] bond0: (slave team0): Releasing backup interface [ 176.672195][ T9024] loop1: detected capacity change from 0 to 512 [ 176.680408][ T9024] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 176.684556][ T9022] bridge0: port 3(team0) entered blocking state [ 176.695589][ T9022] bridge0: port 3(team0) entered disabled state [ 176.701982][ T9022] team0: entered allmulticast mode [ 176.707220][ T9022] team_slave_0: entered allmulticast mode [ 176.712976][ T9022] team_slave_1: entered allmulticast mode [ 176.719415][ T9022] team0: entered promiscuous mode [ 176.724512][ T9022] team_slave_0: entered promiscuous mode [ 176.730176][ T9022] team_slave_1: entered promiscuous mode [ 176.821918][ T3212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.847618][ T9033] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 176.948589][ T3212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.091674][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.110847][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.137511][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 177.137526][ T29] audit: type=1400 audit(1717517074.464:2620): avc: denied { remount } for pid=9041 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 177.167322][ T3212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.191715][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 177.225310][ T29] audit: type=1400 audit(1717517074.554:2621): avc: denied { unmount } for pid=7103 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 177.250840][ T3212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.298370][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.305608][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.312790][ T9039] bridge_slave_0: entered allmulticast mode [ 177.319320][ T9039] bridge_slave_0: entered promiscuous mode [ 177.326822][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.333960][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.341248][ T9039] bridge_slave_1: entered allmulticast mode [ 177.347772][ T9039] bridge_slave_1: entered promiscuous mode [ 177.384628][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.402172][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.441925][ T9039] team0: Port device team_slave_0 added [ 177.450170][ T3212] bridge_slave_1: left allmulticast mode [ 177.455967][ T3212] bridge_slave_1: left promiscuous mode [ 177.461622][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.471389][ T3212] bridge_slave_0: left allmulticast mode [ 177.477409][ T3212] bridge_slave_0: left promiscuous mode [ 177.483105][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.607072][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.617529][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.629130][ T3212] bond0 (unregistering): Released all slaves [ 177.638470][ T3212] bond1 (unregistering): Released all slaves [ 177.648424][ T9039] team0: Port device team_slave_1 added [ 177.690662][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.697744][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.723916][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.735533][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.742573][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.768712][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.783924][ T9079] pim6reg1: entered allmulticast mode [ 177.798042][ T9073] pim6reg1: entered promiscuous mode [ 177.813414][ T3212] hsr_slave_0: left promiscuous mode [ 177.821057][ T3212] hsr_slave_1: left promiscuous mode [ 177.826825][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.834349][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.842102][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.849645][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.859373][ T3212] veth1_macvtap: left promiscuous mode [ 177.865036][ T3212] veth0_macvtap: left promiscuous mode [ 177.870561][ T3212] veth1_vlan: left promiscuous mode [ 177.875836][ T3212] veth0_vlan: left promiscuous mode [ 177.985072][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 177.995877][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 178.069359][ T9039] hsr_slave_0: entered promiscuous mode [ 178.075807][ T9039] hsr_slave_1: entered promiscuous mode [ 178.081733][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.090854][ T9039] Cannot create hsr debugfs directory [ 178.096436][ T9051] chnl_net:caif_netlink_parms(): no params data found [ 178.167097][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.174349][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.183952][ T9051] bridge_slave_0: entered allmulticast mode [ 178.190755][ T9051] bridge_slave_0: entered promiscuous mode [ 178.206882][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.213966][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.223243][ T9051] bridge_slave_1: entered allmulticast mode [ 178.230078][ T9051] bridge_slave_1: entered promiscuous mode [ 178.297296][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.310433][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.370503][ T9051] team0: Port device team_slave_0 added [ 178.380801][ T9051] team0: Port device team_slave_1 added [ 178.396519][ T29] audit: type=1326 audit(1717517075.724:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b47a4ee9 code=0x7fc00000 [ 178.431239][ T29] audit: type=1326 audit(1717517075.724:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f16b47a4ee9 code=0x7fc00000 [ 178.462947][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.469982][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.495995][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.510524][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.517858][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.543883][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.612289][ T9051] hsr_slave_0: entered promiscuous mode [ 178.619279][ T9051] hsr_slave_1: entered promiscuous mode [ 178.625539][ T9051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.633160][ T9051] Cannot create hsr debugfs directory [ 178.644121][ T3212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.750520][ T9039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.786973][ T9051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.800039][ T9039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.814486][ T9039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.851579][ T9039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.867964][ T9051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.941786][ T9051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.980699][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.992032][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 179.012294][ T9051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.037495][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.064319][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.071424][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.080933][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.088123][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.139881][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.147103][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.156648][ T29] audit: type=1326 audit(1717517076.454:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b47a4ee9 code=0x7fc00000 [ 179.181033][ T9111] bridge_slave_0: entered allmulticast mode [ 179.190670][ T9111] bridge_slave_0: entered promiscuous mode [ 179.198769][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.205910][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.213327][ T9111] bridge_slave_1: entered allmulticast mode [ 179.221930][ T9111] bridge_slave_1: entered promiscuous mode [ 179.321693][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.336247][ T9135] 9pnet_fd: Insufficient options for proto=fd [ 179.365953][ T9051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.381487][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.388797][ T9107] kexec: Could not allocate control_code_buffer [ 179.402056][ T9051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.422783][ T9051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.432174][ T9142] loop1: detected capacity change from 0 to 128 [ 179.445228][ T9051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.471831][ T9111] team0: Port device team_slave_0 added [ 179.481836][ T9111] team0: Port device team_slave_1 added [ 179.510193][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.517247][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.543276][ T9111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.565029][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.572003][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.598181][ T9111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.619414][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.632337][ T3212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.637970][ T9146] loop1: detected capacity change from 0 to 8192 [ 179.671848][ T3212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.694842][ T9156] sctp: [Deprecated]: syz-executor.1 (pid 9156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.694842][ T9156] Use struct sctp_sack_info instead [ 179.748132][ T3212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.759292][ T29] audit: type=1326 audit(1717517077.084:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b47a4ee9 code=0x0 [ 179.787366][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.814455][ T9051] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.849922][ T9111] hsr_slave_0: entered promiscuous mode [ 179.860933][ T9111] hsr_slave_1: entered promiscuous mode [ 179.866921][ T9111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.874766][ T9111] Cannot create hsr debugfs directory [ 179.881792][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.888904][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.897857][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.904960][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.942320][ T9039] veth0_vlan: entered promiscuous mode [ 179.997087][ T3212] bridge_slave_1: left allmulticast mode [ 180.002768][ T3212] bridge_slave_1: left promiscuous mode [ 180.008443][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.017107][ T3212] bridge_slave_0: left allmulticast mode [ 180.022793][ T3212] bridge_slave_0: left promiscuous mode [ 180.028559][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.039905][ T3212] bridge_slave_1: left allmulticast mode [ 180.045650][ T3212] bridge_slave_1: left promiscuous mode [ 180.051410][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.061572][ T3212] bridge_slave_0: left allmulticast mode [ 180.067357][ T3212] bridge_slave_0: left promiscuous mode [ 180.073148][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.332143][ T9184] tmpfs: Bad value for 'gid' [ 180.339534][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.350575][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.361747][ T3212] bond0 (unregistering): Released all slaves [ 180.372533][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.383293][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.390616][ T29] audit: type=1400 audit(1717517077.714:2626): avc: denied { setattr } for pid=9178 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=37946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.418981][ T3212] bond0 (unregistering): Released all slaves [ 180.428447][ T9170] pim6reg1: entered allmulticast mode [ 180.442773][ T9174] pim6reg1: entered promiscuous mode [ 180.450695][ T9180] syzkaller1: entered promiscuous mode [ 180.456264][ T9180] syzkaller1: entered allmulticast mode [ 180.473200][ T9051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.489698][ T9039] veth1_vlan: entered promiscuous mode [ 180.549534][ T9039] veth0_macvtap: entered promiscuous mode [ 180.562727][ T9039] veth1_macvtap: entered promiscuous mode [ 180.610883][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.621409][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.631260][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.641717][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.641945][ T29] audit: type=1326 audit(1717517077.964:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b47a4ee9 code=0x7fc00000 [ 180.651541][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.651561][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.651584][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.651601][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.675489][ T29] audit: type=1326 audit(1717517077.974:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f16b47a4ee9 code=0x7fc00000 [ 180.686015][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.750549][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.750569][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.750587][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.752557][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.794635][ T3212] hsr_slave_0: left promiscuous mode [ 180.800570][ T3212] hsr_slave_1: left promiscuous mode [ 180.807401][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.815008][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.822751][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.830228][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.840565][ T3212] hsr_slave_0: left promiscuous mode [ 180.846407][ T3212] hsr_slave_1: left promiscuous mode [ 180.852106][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.859676][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.867951][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.875640][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.887597][ T3212] veth1_macvtap: left promiscuous mode [ 180.893155][ T3212] veth0_macvtap: left promiscuous mode [ 180.898704][ T3212] veth1_vlan: left promiscuous mode [ 180.904129][ T3212] veth0_vlan: left promiscuous mode [ 180.910036][ T3212] veth1_macvtap: left promiscuous mode [ 180.915605][ T3212] veth0_macvtap: left promiscuous mode [ 180.921145][ T3212] veth1_vlan: left promiscuous mode [ 180.926512][ T3212] veth0_vlan: left promiscuous mode [ 181.086313][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 181.097283][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 181.180973][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 181.192293][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 181.237367][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.247976][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.257819][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.268259][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.278114][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.288659][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.298551][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.309035][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.320314][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.337684][ T9039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.346482][ T9039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.355511][ T9039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.364309][ T9039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.378702][ T9198] bond0: entered promiscuous mode [ 181.383774][ T9198] bond_slave_0: entered promiscuous mode [ 181.389749][ T9198] bond_slave_1: entered promiscuous mode [ 181.396110][ T9198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.404421][ T9198] bond0: left promiscuous mode [ 181.409302][ T9198] bond_slave_0: left promiscuous mode [ 181.414857][ T9198] bond_slave_1: left promiscuous mode [ 181.429233][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.434117][ T29] audit: type=1326 audit(1717517078.754:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b47a4ee9 code=0x7fc00000 [ 181.579507][ T9216] loop1: detected capacity change from 0 to 512 [ 181.607184][ T9051] veth0_vlan: entered promiscuous mode [ 181.617187][ T9216] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.628775][ T9051] veth1_vlan: entered promiscuous mode [ 181.641301][ T9111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.655661][ T9216] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 181.663745][ T9051] veth0_macvtap: entered promiscuous mode [ 181.675005][ T9051] veth1_macvtap: entered promiscuous mode [ 181.680896][ T9216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 181.691296][ T9216] System zones: 0-2, 18-18, 34-34 [ 181.696476][ T9111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.709800][ T9216] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.725137][ T9216] EXT4-fs (loop1): 1 truncate cleaned up [ 181.731284][ T9216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.735176][ T9111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.754620][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.765107][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.775039][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.785492][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.795358][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.805858][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.808235][ T9232] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 181.816200][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.836827][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.846708][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.857264][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.870233][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.879365][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.889878][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.899714][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.901544][ T9237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9237 comm=syz-executor.0 [ 181.910137][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.910158][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.910177][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.937815][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.943184][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.972707][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.982559][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.993028][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.004855][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.012539][ T9111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.025088][ T9238] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 182.033279][ T9238] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.055686][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.066708][ T9051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.075657][ T9051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.084393][ T9051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.093151][ T9051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.127835][ T8674] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir3928197397/syzkaller.oL2nBv/27/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 182.182175][ T8674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.257323][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 182.257378][ T29] audit: type=1326 audit(1717517079.584:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13defe6ee9 code=0x7fc00000 [ 182.291824][ T9111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.306359][ T29] audit: type=1326 audit(1717517079.584:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f13defe6ee9 code=0x7fc00000 [ 182.352873][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.370278][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.377475][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.387516][ T9251] loop3: detected capacity change from 0 to 128 [ 182.393071][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.401017][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.474477][ T9251] loop3: detected capacity change from 128 to 0 [ 182.490819][ T9251] bio_check_eod: 89 callbacks suppressed [ 182.490838][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.490838][ T9251] loop3: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 182.523826][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.523826][ T9251] loop3: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 182.527394][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.544449][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.544449][ T9251] loop3: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 182.558309][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.558309][ T9251] loop3: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 182.588821][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.588821][ T9251] loop3: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 182.605365][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.605365][ T9251] loop3: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 182.619471][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.619471][ T9251] loop3: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 182.664824][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.664824][ T9251] loop3: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 182.696489][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.696489][ T9251] loop3: rw=0, sector=33, nr_sectors = 1 limit=0 [ 182.710716][ T9251] FAT-fs (loop3): Directory bread(block 33) failed [ 182.717424][ T9251] syz-executor.3: attempt to access beyond end of device [ 182.717424][ T9251] loop3: rw=0, sector=34, nr_sectors = 1 limit=0 [ 182.731042][ T9251] FAT-fs (loop3): Directory bread(block 34) failed [ 182.738006][ T9251] FAT-fs (loop3): Directory bread(block 35) failed [ 182.751786][ T9251] FAT-fs (loop3): Directory bread(block 36) failed [ 182.767579][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.767967][ T9251] FAT-fs (loop3): Directory bread(block 37) failed [ 182.784879][ T9251] FAT-fs (loop3): Directory bread(block 38) failed [ 182.796777][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 182.800133][ T9251] FAT-fs (loop3): Directory bread(block 39) failed [ 182.810223][ T9251] FAT-fs (loop3): Directory bread(block 40) failed [ 182.832708][ T9051] FAT-fs (loop3): Directory bread(block 33) failed [ 182.839973][ T9051] FAT-fs (loop3): Directory bread(block 34) failed [ 182.855866][ T9051] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 182.870895][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.928895][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.941501][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.948697][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.956026][ T9246] bridge_slave_0: entered allmulticast mode [ 182.962535][ T9246] bridge_slave_0: entered promiscuous mode [ 182.969985][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.977130][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.984469][ T29] audit: type=1326 audit(1717517080.294:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13defe6ee9 code=0x7fc00000 [ 182.989719][ T9246] bridge_slave_1: entered allmulticast mode [ 183.016539][ T9246] bridge_slave_1: entered promiscuous mode [ 183.040782][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.067626][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.086352][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.119430][ T9246] team0: Port device team_slave_0 added [ 183.145707][ T9246] team0: Port device team_slave_1 added [ 183.164637][ T9111] veth0_vlan: entered promiscuous mode [ 183.185169][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.192171][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.218215][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.242784][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.265322][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.272300][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.298377][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.327229][ T9111] veth1_vlan: entered promiscuous mode [ 183.350339][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.368080][ T9267] chnl_net:caif_netlink_parms(): no params data found [ 183.409416][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.444983][ T9111] veth0_macvtap: entered promiscuous mode [ 183.452583][ T9111] veth1_macvtap: entered promiscuous mode [ 183.467323][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.488076][ T9246] hsr_slave_0: entered promiscuous mode [ 183.496386][ T9246] hsr_slave_1: entered promiscuous mode [ 183.502391][ T9246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.510044][ T9246] Cannot create hsr debugfs directory [ 183.523707][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.534370][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.544203][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.554835][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.564672][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.575178][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.585044][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.595531][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.605362][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.615876][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.625814][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.636369][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.647428][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.667612][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.678224][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.688061][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.698554][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.708434][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.718977][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.729098][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.739556][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.749391][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.759874][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.769755][ T9111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.780251][ T9111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.791257][ T9111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.826766][ T9111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.835704][ T9111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.844425][ T9111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.853142][ T9111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.872719][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.880033][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.887718][ T9267] bridge_slave_0: entered allmulticast mode [ 183.896821][ T9267] bridge_slave_0: entered promiscuous mode [ 183.904361][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.911657][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.921189][ T9267] bridge_slave_1: entered allmulticast mode [ 183.927807][ T9267] bridge_slave_1: entered promiscuous mode [ 183.958277][ T9300] loop2: detected capacity change from 0 to 8192 [ 183.981730][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.005168][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.014874][ T63] team0: left allmulticast mode [ 184.019810][ T63] team_slave_0: left allmulticast mode [ 184.025316][ T63] team_slave_1: left allmulticast mode [ 184.030818][ T63] team0: left promiscuous mode [ 184.035718][ T63] team_slave_0: left promiscuous mode [ 184.037622][ T9302] loop2: detected capacity change from 0 to 1024 [ 184.041260][ T63] team_slave_1: left promiscuous mode [ 184.053091][ T63] bridge0: port 3(team0) entered disabled state [ 184.060228][ T63] bridge_slave_1: left allmulticast mode [ 184.065935][ T63] bridge_slave_1: left promiscuous mode [ 184.071549][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.079514][ T63] bridge_slave_0: left allmulticast mode [ 184.085286][ T63] bridge_slave_0: left promiscuous mode [ 184.090933][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.101106][ T63] team0: left allmulticast mode [ 184.102790][ T9302] loop2: detected capacity change from 0 to 1024 [ 184.106064][ T63] team_slave_0: left allmulticast mode [ 184.113962][ T9302] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 184.117871][ T63] team_slave_1: left allmulticast mode [ 184.117889][ T63] team0: left promiscuous mode [ 184.131261][ T9302] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.132903][ T63] team_slave_0: left promiscuous mode [ 184.138467][ T9302] jbd2_journal_init_inode: Cannot locate journal superblock [ 184.147864][ T63] team_slave_1: left promiscuous mode [ 184.153154][ T9302] EXT4-fs (loop2): Could not load journal inode [ 184.160581][ T63] bridge0: port 3(team0) entered disabled state [ 184.180164][ T63] bridge_slave_1: left allmulticast mode [ 184.185991][ T63] bridge_slave_1: left promiscuous mode [ 184.191597][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.199626][ T63] bridge_slave_0: left allmulticast mode [ 184.205333][ T63] bridge_slave_0: left promiscuous mode [ 184.211021][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.456995][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.467871][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.479209][ T63] bond0 (unregistering): Released all slaves [ 184.489236][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.499878][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.510641][ T63] bond0 (unregistering): Released all slaves [ 184.549132][ T9267] team0: Port device team_slave_0 added [ 184.556777][ T9267] team0: Port device team_slave_1 added [ 184.598274][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.605327][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.631359][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.646331][ T9312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9312 comm=syz-executor.2 [ 184.661406][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.668745][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.687012][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.694000][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.720126][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.740102][ T9314] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 184.748363][ T9314] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.783207][ T63] IPVS: stopping master sync thread 7620 ... [ 184.817631][ T63] hsr_slave_0: left promiscuous mode [ 184.830118][ T63] hsr_slave_1: left promiscuous mode [ 184.836299][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.843813][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.851991][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.859547][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.869222][ T63] hsr_slave_0: left promiscuous mode [ 184.874978][ T63] hsr_slave_1: left promiscuous mode [ 184.885088][ T63] dummy0: left promiscuous mode [ 184.890017][ T63] veth1_macvtap: left promiscuous mode [ 184.895552][ T63] veth0_macvtap: left promiscuous mode [ 184.901063][ T63] veth1_vlan: left promiscuous mode [ 184.906366][ T63] veth0_vlan: left promiscuous mode [ 184.912683][ T63] veth1_macvtap: left promiscuous mode [ 184.918337][ T63] veth0_macvtap: left promiscuous mode [ 184.923852][ T63] veth1_vlan: left promiscuous mode [ 184.929121][ T63] veth0_vlan: left promiscuous mode [ 184.935994][ T29] audit: type=1326 audit(1717517082.264:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13defe6ee9 code=0x7fc00000 [ 184.980742][ T29] audit: type=1326 audit(1717517082.264:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f13defe6ee9 code=0x7fc00000 [ 185.136150][ T9332] loop4: detected capacity change from 0 to 256 [ 185.143932][ T9332] FAT-fs (loop4): bogus logical sector size 8 [ 185.150144][ T9332] FAT-fs (loop4): Can't find a valid FAT filesystem [ 185.235772][ T63] team0 (unregistering): Port device team_slave_1 removed [ 185.247036][ T63] team0 (unregistering): Port device team_slave_0 removed [ 185.329533][ T63] team0 (unregistering): Port device team_slave_1 removed [ 185.340895][ T63] team0 (unregistering): Port device team_slave_0 removed [ 185.393965][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.419366][ T9267] hsr_slave_0: entered promiscuous mode [ 185.426247][ T9267] hsr_slave_1: entered promiscuous mode [ 185.433973][ T9267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.442110][ T9267] Cannot create hsr debugfs directory [ 185.505853][ T9246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.517545][ T9246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.528594][ T9246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.544588][ T9246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.615595][ T29] audit: type=1400 audit(1717517082.944:2638): avc: denied { create } for pid=9347 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 185.638876][ T29] audit: type=1400 audit(1717517082.964:2639): avc: denied { write } for pid=9347 comm="syz-executor.4" name="file0" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 185.661964][ T29] audit: type=1400 audit(1717517082.964:2640): avc: denied { open } for pid=9347 comm="syz-executor.4" path="/root/syzkaller-testdir3019189639/syzkaller.Gqgke6/6/file0" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 185.697584][ T29] audit: type=1400 audit(1717517082.974:2641): avc: denied { unlink } for pid=9111 comm="syz-executor.4" name="file0" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 185.697615][ T29] audit: type=1326 audit(1717517082.994:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13defe6ee9 code=0x7fc00000 [ 185.743532][ T9329] chnl_net:caif_netlink_parms(): no params data found [ 185.873134][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.885714][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.892827][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.903347][ T9329] bridge_slave_0: entered allmulticast mode [ 185.910690][ T9329] bridge_slave_0: entered promiscuous mode [ 185.923024][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.930189][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.937470][ T9329] bridge_slave_1: entered allmulticast mode [ 185.943920][ T9329] bridge_slave_1: entered promiscuous mode [ 185.959025][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.987991][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.005899][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.020475][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.022100][ T9366] loop2: detected capacity change from 0 to 1024 [ 186.038550][ T9366] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.049323][ T9366] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 186.050578][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.059668][ T9366] EXT4-fs (loop2): orphan cleanup on readonly fs [ 186.064319][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.071113][ T9366] EXT4-fs error (device loop2): __ext4_get_inode_loc:4357: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 186.091006][ T9366] EXT4-fs (loop2): Remounting filesystem read-only [ 186.098272][ T9366] EXT4-fs (loop2): 1 truncate cleaned up [ 186.107370][ T9366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.120531][ T9366] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 186.127461][ T9366] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.128559][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.143589][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.158428][ T9329] team0: Port device team_slave_0 added [ 186.167457][ T9329] team0: Port device team_slave_1 added [ 186.189231][ T9366] loop2: detected capacity change from 0 to 1024 [ 186.198289][ T9366] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 186.212737][ T9366] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 186.223977][ T9366] jbd2_journal_init_inode: Cannot locate journal superblock [ 186.231408][ T9366] EXT4-fs (loop2): Could not load journal inode [ 186.242054][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.249084][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.275044][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.299380][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.306490][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.332490][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.345816][ T9267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.355404][ T9267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.375894][ T9267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.385048][ T9267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.396539][ T9351] chnl_net:caif_netlink_parms(): no params data found [ 186.467890][ T9380] loop2: detected capacity change from 0 to 512 [ 186.476709][ T9380] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.476788][ T9329] hsr_slave_0: entered promiscuous mode [ 186.494662][ T9329] hsr_slave_1: entered promiscuous mode [ 186.495465][ T9380] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 186.509204][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.509354][ T9380] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 186.520635][ T9329] Cannot create hsr debugfs directory [ 186.525075][ T9380] System zones: 0-2, 18-18, 34-34 [ 186.535807][ T9380] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.553172][ T9380] EXT4-fs (loop2): 1 truncate cleaned up [ 186.559839][ T9380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.578464][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.591941][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.625847][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.639181][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.657754][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.665003][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.669936][ T9039] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir3604512038/syzkaller.pNGChj/17/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 186.672410][ T9351] bridge_slave_0: entered allmulticast mode [ 186.702919][ T9351] bridge_slave_0: entered promiscuous mode [ 186.710088][ T9039] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.710881][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.726181][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.733574][ T9351] bridge_slave_1: entered allmulticast mode [ 186.740573][ T9351] bridge_slave_1: entered promiscuous mode [ 186.760550][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.773872][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.786486][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.837874][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.846208][ T9351] team0: Port device team_slave_0 added [ 186.858764][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.895644][ T9351] team0: Port device team_slave_1 added [ 186.921092][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.929049][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.936113][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.962092][ T9351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.975395][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.982350][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.008473][ T9351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.047640][ T9351] hsr_slave_0: entered promiscuous mode [ 187.054536][ T9351] hsr_slave_1: entered promiscuous mode [ 187.060437][ T9351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.068171][ T9351] Cannot create hsr debugfs directory [ 187.075840][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.119428][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.126650][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.135784][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.143038][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.191222][ T63] bridge_slave_1: left allmulticast mode [ 187.196951][ T63] bridge_slave_1: left promiscuous mode [ 187.202755][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.213908][ T63] bridge_slave_0: left allmulticast mode [ 187.219703][ T63] bridge_slave_0: left promiscuous mode [ 187.225457][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.327048][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.337665][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.348225][ T63] bond0 (unregistering): Released all slaves [ 187.406147][ T9246] veth0_vlan: entered promiscuous mode [ 187.441201][ T9246] veth1_vlan: entered promiscuous mode [ 187.470273][ T9246] veth0_macvtap: entered promiscuous mode [ 187.489052][ T63] hsr_slave_0: left promiscuous mode [ 187.494805][ T63] hsr_slave_1: left promiscuous mode [ 187.500642][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.508223][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.516197][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.523600][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.533195][ T63] veth1_macvtap: left promiscuous mode [ 187.538716][ T63] veth0_macvtap: left promiscuous mode [ 187.544308][ T63] veth1_vlan: left promiscuous mode [ 187.549537][ T63] veth0_vlan: left promiscuous mode [ 187.651041][ T63] team0 (unregistering): Port device team_slave_1 removed [ 187.662056][ T63] team0 (unregistering): Port device team_slave_0 removed [ 187.719876][ T9246] veth1_macvtap: entered promiscuous mode [ 187.746295][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.756785][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.766647][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.777092][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.787004][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.797827][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.807957][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.818393][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.828287][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.838752][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.849650][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.859559][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.872301][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.882881][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.892765][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.903297][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.913178][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.923610][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.933443][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.943931][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.953740][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.964285][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.975181][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.999849][ T9246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.008621][ T9246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.017337][ T9246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.026106][ T9246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.050690][ T9351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.079595][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 188.146890][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.154052][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.161384][ T9396] bridge_slave_0: entered allmulticast mode [ 188.169541][ T9396] bridge_slave_0: entered promiscuous mode [ 188.176820][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.183936][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.191238][ T9396] bridge_slave_1: entered allmulticast mode [ 188.198108][ T9396] bridge_slave_1: entered promiscuous mode [ 188.219557][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.230599][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.260544][ T9267] veth0_vlan: entered promiscuous mode [ 188.268896][ T9396] team0: Port device team_slave_0 added [ 188.278523][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 188.278541][ T29] audit: type=1400 audit(1717517085.604:3108): avc: denied { ioctl } for pid=9423 comm="syz-executor.0" path="/root/syzkaller-testdir3215641776/syzkaller.zb8ytq/1/file0" dev="sda1" ino=1950 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 188.291812][ T9396] team0: Port device team_slave_1 added [ 188.338419][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.345445][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.371448][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.383745][ T9267] veth1_vlan: entered promiscuous mode [ 188.390744][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.397787][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.423882][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.456563][ T9396] hsr_slave_0: entered promiscuous mode [ 188.462779][ T9396] hsr_slave_1: entered promiscuous mode [ 188.468925][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.476615][ T9396] Cannot create hsr debugfs directory [ 188.503378][ T9267] veth0_macvtap: entered promiscuous mode [ 188.540462][ T9351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.552636][ T9267] veth1_macvtap: entered promiscuous mode [ 188.576057][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.586728][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.596715][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.607280][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.617121][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.627544][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.637388][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.647862][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.657795][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.668304][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.678119][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.688578][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.699619][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.710885][ T9351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.730449][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.740937][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.750806][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.761396][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.771328][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.781761][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.791585][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.802101][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.812170][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.822846][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.832761][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.843295][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.854478][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.865381][ T9351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.880514][ T9267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.889540][ T9267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.898405][ T9267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.907170][ T9267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.943029][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.968906][ T9351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.981795][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.993099][ T9351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.002603][ T9351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.014234][ T9351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.029037][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.048931][ T9431] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.066253][ T9329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.075791][ T9329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.091498][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.104290][ T9329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.116248][ T9329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.192116][ T63] bridge_slave_1: left allmulticast mode [ 189.197846][ T63] bridge_slave_1: left promiscuous mode [ 189.203484][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.220638][ T63] bridge_slave_0: left allmulticast mode [ 189.226483][ T63] bridge_slave_0: left promiscuous mode [ 189.226872][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.236850][ T63] bridge_slave_1: left allmulticast mode [ 189.236868][ T63] bridge_slave_1: left promiscuous mode [ 189.236978][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.245169][ T63] bridge_slave_0: left allmulticast mode [ 189.245189][ T63] bridge_slave_0: left promiscuous mode [ 189.245360][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.290597][ T9442] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.342861][ T9449] FAULT_INJECTION: forcing a failure. [ 189.342861][ T9449] name failslab, interval 1, probability 0, space 0, times 1 [ 189.355615][ T9449] CPU: 1 PID: 9449 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 189.366143][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 189.376200][ T9449] Call Trace: [ 189.379514][ T9449] [ 189.382483][ T9449] dump_stack_lvl+0xf2/0x150 [ 189.387088][ T9449] dump_stack+0x15/0x20 [ 189.391318][ T9449] should_fail_ex+0x229/0x230 [ 189.396079][ T9449] ? __get_vm_area_node+0xf7/0x1b0 [ 189.401227][ T9449] __should_failslab+0x92/0xa0 [ 189.406021][ T9449] should_failslab+0x9/0x20 [ 189.410549][ T9449] kmalloc_node_trace_noprof+0x50/0x2b0 [ 189.416125][ T9449] __get_vm_area_node+0xf7/0x1b0 [ 189.421092][ T9449] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 189.426930][ T9449] ? bpf_prog_calc_tag+0x6a/0x3b0 [ 189.432009][ T9449] ? alloc_pages_bulk_noprof+0x298/0x6b0 [ 189.437672][ T9449] ? policy_nodemask+0x2ba/0x3e0 [ 189.442614][ T9449] ? __vmap_pages_range_noflush+0x923/0x940 [ 189.448577][ T9449] ? bpf_prog_calc_tag+0x6a/0x3b0 [ 189.453728][ T9449] vmalloc_noprof+0x5e/0x70 [ 189.458320][ T9449] ? bpf_prog_calc_tag+0x6a/0x3b0 [ 189.463416][ T9449] bpf_prog_calc_tag+0x6a/0x3b0 [ 189.468292][ T9449] ? __rcu_read_unlock+0x4e/0x70 [ 189.473352][ T9449] ? avc_has_perm_noaudit+0x1cc/0x210 [ 189.478805][ T9449] ? check_btf_info+0x45c/0xf30 [ 189.483699][ T9449] ? selinux_capable+0x1f2/0x260 [ 189.488684][ T9449] resolve_pseudo_ldimm64+0x53/0xd50 [ 189.494043][ T9449] ? check_attach_btf_id+0x2c0/0x680 [ 189.499345][ T9449] ? check_subprogs+0x39c/0x410 [ 189.504263][ T9449] bpf_check+0x2923/0xa060 [ 189.508744][ T9449] ? cgroup_rstat_updated+0x99/0x550 [ 189.514096][ T9449] ? bpf_prog_alloc+0x59/0x150 [ 189.518924][ T9449] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 189.524137][ T9449] ? should_fail_ex+0xd7/0x230 [ 189.528901][ T9449] ? selinux_bpf_prog_load+0x35/0xe0 [ 189.534264][ T9449] ? __should_failslab+0x92/0xa0 [ 189.539214][ T9449] ? should_failslab+0x9/0x20 [ 189.543898][ T9449] ? kmalloc_trace_noprof+0x10b/0x2a0 [ 189.549411][ T9449] ? selinux_bpf_prog_load+0xbb/0xe0 [ 189.554722][ T9449] bpf_prog_load+0xed4/0x1060 [ 189.559522][ T9449] __sys_bpf+0x463/0x7a0 [ 189.563859][ T9449] __x64_sys_bpf+0x43/0x50 [ 189.568277][ T9449] x64_sys_call+0x2655/0x2d70 [ 189.572959][ T9449] do_syscall_64+0xc9/0x1c0 [ 189.577476][ T9449] ? clear_bhb_loop+0x55/0xb0 [ 189.582265][ T9449] ? clear_bhb_loop+0x55/0xb0 [ 189.586949][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.592877][ T9449] RIP: 0033:0x7f6fb0d89ee9 [ 189.597365][ T9449] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 189.616973][ T9449] RSP: 002b:00007f6fb01040c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.625385][ T9449] RAX: ffffffffffffffda RBX: 00007f6fb0ec0f80 RCX: 00007f6fb0d89ee9 [ 189.633379][ T9449] RDX: 00000000000000a0 RSI: 00000000200009c0 RDI: 0000000000000005 [ 189.641377][ T9449] RBP: 00007f6fb0104120 R08: 0000000000000000 R09: 0000000000000000 [ 189.649396][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.657416][ T9449] R13: 000000000000000b R14: 00007f6fb0ec0f80 R15: 00007ffe7b368d78 [ 189.665493][ T9449] [ 189.669138][ T9449] syz-executor.0: vmalloc error: size 128, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 189.683803][ T9449] CPU: 1 PID: 9449 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 189.694322][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 189.704419][ T9449] Call Trace: [ 189.707704][ T9449] [ 189.710636][ T9449] dump_stack_lvl+0xf2/0x150 [ 189.715251][ T9449] dump_stack+0x15/0x20 [ 189.719451][ T9449] warn_alloc+0x145/0x1b0 [ 189.723866][ T9449] __vmalloc_node_range_noprof+0x310/0xef0 [ 189.729695][ T9449] ? alloc_pages_bulk_noprof+0x298/0x6b0 [ 189.735373][ T9449] ? policy_nodemask+0x2ba/0x3e0 [ 189.740514][ T9449] ? __vmap_pages_range_noflush+0x923/0x940 [ 189.746423][ T9449] ? bpf_prog_calc_tag+0x6a/0x3b0 [ 189.751462][ T9449] vmalloc_noprof+0x5e/0x70 [ 189.756089][ T9449] ? bpf_prog_calc_tag+0x6a/0x3b0 [ 189.761250][ T9449] bpf_prog_calc_tag+0x6a/0x3b0 [ 189.766129][ T9449] ? __rcu_read_unlock+0x4e/0x70 [ 189.771086][ T9449] ? avc_has_perm_noaudit+0x1cc/0x210 [ 189.776545][ T9449] ? check_btf_info+0x45c/0xf30 [ 189.781402][ T9449] ? selinux_capable+0x1f2/0x260 [ 189.786345][ T9449] resolve_pseudo_ldimm64+0x53/0xd50 [ 189.791725][ T9449] ? check_attach_btf_id+0x2c0/0x680 [ 189.797038][ T9449] ? check_subprogs+0x39c/0x410 [ 189.801905][ T9449] bpf_check+0x2923/0xa060 [ 189.806375][ T9449] ? cgroup_rstat_updated+0x99/0x550 [ 189.811743][ T9449] ? bpf_prog_alloc+0x59/0x150 [ 189.816523][ T9449] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 189.821747][ T9449] ? should_fail_ex+0xd7/0x230 [ 189.826530][ T9449] ? selinux_bpf_prog_load+0x35/0xe0 [ 189.831880][ T9449] ? __should_failslab+0x92/0xa0 [ 189.836822][ T9449] ? should_failslab+0x9/0x20 [ 189.841552][ T9449] ? kmalloc_trace_noprof+0x10b/0x2a0 [ 189.846941][ T9449] ? selinux_bpf_prog_load+0xbb/0xe0 [ 189.852282][ T9449] bpf_prog_load+0xed4/0x1060 [ 189.856979][ T9449] __sys_bpf+0x463/0x7a0 [ 189.861285][ T9449] __x64_sys_bpf+0x43/0x50 [ 189.865718][ T9449] x64_sys_call+0x2655/0x2d70 [ 189.870408][ T9449] do_syscall_64+0xc9/0x1c0 [ 189.874998][ T9449] ? clear_bhb_loop+0x55/0xb0 [ 189.879695][ T9449] ? clear_bhb_loop+0x55/0xb0 [ 189.884387][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.890295][ T9449] RIP: 0033:0x7f6fb0d89ee9 [ 189.894713][ T9449] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 189.914343][ T9449] RSP: 002b:00007f6fb01040c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.922762][ T9449] RAX: ffffffffffffffda RBX: 00007f6fb0ec0f80 RCX: 00007f6fb0d89ee9 [ 189.930754][ T9449] RDX: 00000000000000a0 RSI: 00000000200009c0 RDI: 0000000000000005 [ 189.938741][ T9449] RBP: 00007f6fb0104120 R08: 0000000000000000 R09: 0000000000000000 [ 189.946795][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.954770][ T9449] R13: 000000000000000b R14: 00007f6fb0ec0f80 R15: 00007ffe7b368d78 [ 189.962749][ T9449] [ 189.965814][ T9449] Mem-Info: [ 189.968939][ T9449] active_anon:418 inactive_anon:23319 isolated_anon:0 [ 189.968939][ T9449] active_file:4102 inactive_file:10513 isolated_file:0 [ 189.968939][ T9449] unevictable:0 dirty:62 writeback:0 [ 189.968939][ T9449] slab_reclaimable:2850 slab_unreclaimable:18941 [ 189.968939][ T9449] mapped:22675 shmem:6604 pagetables:595 [ 189.968939][ T9449] sec_pagetables:0 bounce:0 [ 189.968939][ T9449] kernel_misc_reclaimable:0 [ 189.968939][ T9449] free:1882655 free_pcp:10327 free_cma:0 [ 190.014573][ T9449] Node 0 active_anon:1672kB inactive_anon:93276kB active_file:16408kB inactive_file:42052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90700kB dirty:248kB writeback:0kB shmem:26416kB writeback_tmp:0kB kernel_stack:3936kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no [ 190.042996][ T9449] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.070052][ T9449] lowmem_reserve[]: 0 2874 7852 0 [ 190.075171][ T9449] Node 0 DMA32 free:2957152kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960692kB mlocked:0kB bounce:0kB free_pcp:3540kB local_pcp:0kB free_cma:0kB [ 190.103611][ T9449] lowmem_reserve[]: 0 0 4978 0 [ 190.108430][ T9449] Node 0 Normal free:4558108kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:1672kB inactive_anon:93276kB active_file:16408kB inactive_file:42052kB unevictable:0kB writepending:248kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:37892kB local_pcp:36864kB free_cma:0kB [ 190.138957][ T9449] lowmem_reserve[]: 0 0 0 0 [ 190.143561][ T9449] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.156487][ T9449] Node 0 DMA32: 6*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957152kB [ 190.172592][ T9449] Node 0 Normal: 684*4kB (UME) 565*8kB (UME) 292*16kB (UME) 323*32kB (UME) 176*64kB (UME) 102*128kB (ME) 44*256kB (UME) 76*512kB (UME) 110*1024kB (UME) 63*2048kB (UM) 1031*4096kB (UM) = 4561400kB [ 190.192101][ T9449] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 190.201582][ T9449] 21238 total pagecache pages [ 190.206278][ T9449] 21 pages in swap cache [ 190.210510][ T9449] Free swap = 124468kB [ 190.214721][ T9449] Total swap = 124996kB [ 190.218920][ T9449] 2097051 pages RAM [ 190.222757][ T9449] 0 pages HighMem/MovableOnly [ 190.227537][ T9449] 78486 pages reserved [ 190.326381][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.338254][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.348768][ T63] bond0 (unregistering): Released all slaves [ 190.358295][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.369005][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.379791][ T63] bond0 (unregistering): Released all slaves [ 190.395405][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.406956][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.416365][ T9457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.494990][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.511837][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.533774][ T9351] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.549066][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.556262][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.579449][ T63] hsr_slave_0: left promiscuous mode [ 190.585603][ T63] hsr_slave_1: left promiscuous mode [ 190.591374][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.598846][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.606502][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.614172][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.623906][ T63] hsr_slave_0: left promiscuous mode [ 190.629752][ T63] hsr_slave_1: left promiscuous mode [ 190.635431][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.642879][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.650814][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.658287][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.669857][ T63] veth1_macvtap: left promiscuous mode [ 190.675492][ T63] veth0_macvtap: left promiscuous mode [ 190.681035][ T63] veth1_vlan: left promiscuous mode [ 190.686292][ T63] veth0_vlan: left promiscuous mode [ 190.692798][ T63] veth1_macvtap: left promiscuous mode [ 190.698409][ T63] veth0_macvtap: left promiscuous mode [ 190.704063][ T63] veth1_vlan: left promiscuous mode [ 190.709292][ T63] veth0_vlan: left promiscuous mode [ 190.866697][ T63] team0 (unregistering): Port device team_slave_1 removed [ 190.877528][ T63] team0 (unregistering): Port device team_slave_0 removed [ 190.959419][ T63] team0 (unregistering): Port device team_slave_1 removed [ 190.971193][ T63] team0 (unregistering): Port device team_slave_0 removed [ 191.013020][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.021051][ T9476] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.036760][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.043844][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.052456][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.059521][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.076548][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.083640][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.125209][ T29] audit: type=1326 audit(1717517088.444:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb0d89ee9 code=0x7fc00000 [ 191.182027][ T9485] loop1: detected capacity change from 0 to 512 [ 191.182554][ T9396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.199042][ T9485] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.205856][ T9396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.221893][ T9396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.239162][ T9485] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 191.262640][ T9396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.272257][ T9485] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 191.283940][ T9485] System zones: 0-2, 18-18, 34-34 [ 191.296138][ T9485] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 191.319351][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.326855][ T9485] EXT4-fs (loop1): 1 truncate cleaned up [ 191.399977][ T9485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.457495][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.481969][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.492686][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.519317][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.545280][ T9267] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir147821521/syzkaller.7MjAMG/11/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 191.581493][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.596916][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.604076][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.615177][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.622313][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.631133][ T9267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.642695][ T9396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.653203][ T9396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.739170][ T9329] veth0_vlan: entered promiscuous mode [ 191.761006][ T9329] veth1_vlan: entered promiscuous mode [ 191.791605][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.802419][ T9351] veth0_vlan: entered promiscuous mode [ 191.816517][ T9329] veth0_macvtap: entered promiscuous mode [ 191.824171][ T9329] veth1_macvtap: entered promiscuous mode [ 191.837431][ T9351] veth1_vlan: entered promiscuous mode [ 191.861868][ T9351] veth0_macvtap: entered promiscuous mode [ 191.869890][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.880401][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.890308][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.900963][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.910927][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.921402][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.931357][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.941800][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.951694][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.962211][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.973173][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.983995][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.994598][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.004438][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.015032][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.024918][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.035592][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.045563][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.055991][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.065811][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.076330][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.087344][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.096546][ T9351] veth1_macvtap: entered promiscuous mode [ 192.110250][ T9329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.119292][ T9329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.128228][ T9329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.137045][ T9329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.150272][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.160745][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.170584][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.181030][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.190934][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.201692][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.211790][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.222237][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.232096][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.242601][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.252505][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.263074][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.274715][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.295595][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.306208][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.316175][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.326656][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.336560][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.336576][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.336593][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.336606][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.336621][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.336635][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.336654][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.336670][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.338066][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.429095][ T9351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.437988][ T9351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.446768][ T9351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.455571][ T9351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.517396][ T9396] veth0_vlan: entered promiscuous mode [ 192.528809][ T9396] veth1_vlan: entered promiscuous mode [ 192.562253][ T9396] veth0_macvtap: entered promiscuous mode [ 192.562674][ T9542] loop3: detected capacity change from 0 to 512 [ 192.572415][ T9396] veth1_macvtap: entered promiscuous mode [ 192.590691][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.601470][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.611336][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.621822][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.631715][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.642236][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.652132][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.662588][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.666319][ T9542] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.672439][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.681461][ T9542] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 192.700392][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.710318][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.720810][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.730750][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.741183][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.753799][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.757191][ T9542] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 192.765420][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.780450][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.781534][ T9542] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 192.790266][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.808744][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.818616][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.829188][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.839025][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.842457][ T9542] System zones: [ 192.849445][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.849463][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.852998][ T9542] 0-2 [ 192.862796][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.862815][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.862832][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.862847][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.873274][ T9542] , 18-18, 34-34 [ 192.875867][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.878410][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.885694][ T9542] [ 192.981400][ T9542] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 192.989290][ T9396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.004849][ T9396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.013580][ T9396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.017944][ T9542] EXT4-fs (loop3): 1 truncate cleaned up [ 193.022443][ T9396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.029704][ T9542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.051825][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.059374][ T9542] EXT4-fs error (device loop3): ext4_generic_delete_entry:2676: inode #12: block 13: comm syz-executor.3: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 193.061349][ T29] audit: type=1400 audit(1717517090.384:3110): avc: denied { unlink } for pid=9540 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 193.096720][ T9542] EXT4-fs error (device loop3) in ext4_delete_entry:2747: Corrupt filesystem [ 193.129868][ T9329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.286645][ T9576] 9pnet_fd: Insufficient options for proto=fd [ 193.655667][ T9599] loop4: detected capacity change from 0 to 128 [ 193.666967][ T9600] loop2: detected capacity change from 0 to 512 [ 193.688741][ T9600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.688803][ T9351] FAT-fs (loop4): error, invalid access to FAT (entry 0x05000006) [ 193.709533][ T9351] FAT-fs (loop4): Filesystem has been set read-only [ 193.711845][ T9600] ext4 filesystem being mounted at /root/syzkaller-testdir2534101330/syzkaller.9zquMU/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.734714][ T9605] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.747195][ T29] audit: type=1400 audit(1717517091.074:3111): avc: denied { mounton } for pid=9598 comm="syz-executor.2" path="/root/syzkaller-testdir2534101330/syzkaller.9zquMU/3/file0/file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 193.789144][ T9396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.836484][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.848297][ T9614] vlan2: entered promiscuous mode [ 193.888901][ T9616] loop2: detected capacity change from 0 to 512 [ 193.896914][ T9616] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 193.900444][ T29] audit: type=1400 audit(1717517091.224:3112): avc: denied { view } for pid=9619 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.906632][ T9616] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 193.936119][ T9616] EXT4-fs (loop2): group descriptors corrupted! [ 194.042797][ T9636] loop4: detected capacity change from 0 to 256 [ 194.061197][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.086797][ T9642] loop2: detected capacity change from 0 to 128 [ 194.107971][ T9396] FAT-fs (loop2): error, invalid access to FAT (entry 0x05000006) [ 194.115994][ T9396] FAT-fs (loop2): Filesystem has been set read-only [ 194.163568][ T9647] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.233235][ T9653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9653 comm=syz-executor.3 [ 194.294604][ T9663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.313623][ T29] audit: type=1326 audit(1717517091.634:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9662 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f161f347ee9 code=0xffff0000 [ 194.344286][ T9665] loop2: detected capacity change from 0 to 128 [ 194.629062][ T4890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.732296][ T4890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.799870][ T4890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.828395][ T9681] hub 6-0:1.0: USB hub found [ 194.833154][ T9681] hub 6-0:1.0: 8 ports detected [ 194.848448][ T4890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.968646][ T4890] bridge_slave_1: left allmulticast mode [ 194.974447][ T4890] bridge_slave_1: left promiscuous mode [ 194.980139][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.999833][ T4890] bridge_slave_0: left allmulticast mode [ 195.005547][ T4890] bridge_slave_0: left promiscuous mode [ 195.011291][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.042318][ T9700] loop3: detected capacity change from 0 to 128 [ 195.075978][ T9702] loop4: detected capacity change from 0 to 2048 [ 195.114852][ T9702] loop4: p2 < > [ 195.197020][ T4890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.207969][ T4890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.220536][ T4890] bond0 (unregistering): Released all slaves [ 195.237138][ T9674] chnl_net:caif_netlink_parms(): no params data found [ 195.280171][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.287430][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.294980][ T9674] bridge_slave_0: entered allmulticast mode [ 195.301688][ T9674] bridge_slave_0: entered promiscuous mode [ 195.315531][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.322684][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.340010][ T9674] bridge_slave_1: entered allmulticast mode [ 195.348867][ T9674] bridge_slave_1: entered promiscuous mode [ 195.359076][ T4890] hsr_slave_0: left promiscuous mode [ 195.366966][ T9717] loop2: detected capacity change from 0 to 2048 [ 195.373725][ T4890] hsr_slave_1: left promiscuous mode [ 195.383538][ T9720] loop3: detected capacity change from 0 to 128 [ 195.387575][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.397418][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.407806][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.415306][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.425106][ T4890] veth1_macvtap: left promiscuous mode [ 195.430655][ T4890] veth0_macvtap: left promiscuous mode [ 195.436220][ T4890] veth1_vlan: left promiscuous mode [ 195.441570][ T4890] veth0_vlan: left promiscuous mode [ 195.442310][ T9724] loop4: detected capacity change from 0 to 256 [ 195.455586][ T9724] FAT-fs (loop4): bogus logical sector size 2056 [ 195.460782][ T9717] Alternate GPT is invalid, using primary GPT. [ 195.461959][ T9724] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 195.468420][ T9717] loop2: p2 p3 p7 [ 195.477370][ T9724] FAT-fs (loop4): Can't find a valid FAT filesystem [ 195.570965][ T29] audit: type=1400 audit(1717517092.894:3114): avc: denied { shutdown } for pid=9729 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.615699][ T9733] loop3: detected capacity change from 0 to 128 [ 195.624883][ T9734] loop4: detected capacity change from 0 to 164 [ 195.636574][ T4890] team0 (unregistering): Port device team_slave_1 removed [ 195.658067][ T4890] team0 (unregistering): Port device team_slave_0 removed [ 195.681987][ T9736] __nla_validate_parse: 8 callbacks suppressed [ 195.682005][ T9736] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.735866][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.755872][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.781465][ T9674] team0: Port device team_slave_0 added [ 195.790242][ T9674] team0: Port device team_slave_1 added [ 195.821986][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.829158][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.855092][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.871664][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.878919][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.904871][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.938243][ T9674] hsr_slave_0: entered promiscuous mode [ 195.944620][ T9674] hsr_slave_1: entered promiscuous mode [ 195.950573][ T9674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.958230][ T9674] Cannot create hsr debugfs directory [ 196.199650][ T9674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.208296][ T9674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.217458][ T9674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.226056][ T9674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.268555][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.286172][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.302284][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.309421][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.323302][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.330490][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.342278][ T9768] loop6: detected capacity change from 0 to 16384 [ 196.362752][ T9674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.440470][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.609443][ T9674] veth0_vlan: entered promiscuous mode [ 196.630931][ T9674] veth1_vlan: entered promiscuous mode [ 196.669416][ T9674] veth0_macvtap: entered promiscuous mode [ 196.690342][ T9674] veth1_macvtap: entered promiscuous mode [ 196.717638][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.728133][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.737973][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.748411][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.758284][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.768726][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.778558][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.789033][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.799036][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.809521][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.819382][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.829951][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.839987][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.850434][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.863459][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.896221][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.906707][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.916642][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.927083][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.936967][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.947414][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.957333][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.967963][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.977812][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.988249][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.998439][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.009160][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.019007][ T9674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.029471][ T9674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.235315][ T9674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.259469][ T9674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.268279][ T9674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.277014][ T9674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.285793][ T9674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.473502][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.541314][ T9803] 9pnet_fd: Insufficient options for proto=fd [ 197.676332][ T29] audit: type=1400 audit(1717517095.004:3115): avc: denied { write } for pid=9819 comm="syz-executor.0" path="socket:[42710]" dev="sockfs" ino=42710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.884292][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.893607][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.901196][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.909504][ T9830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.913470][ T9835] loop4: detected capacity change from 0 to 2048 [ 197.917017][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.966459][ T9835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.980883][ T9835] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz-executor.4: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 198.001509][ T9835] EXT4-fs (loop4): Remounting filesystem read-only [ 198.146732][ T29] audit: type=1400 audit(1717517095.474:3116): avc: denied { search } for pid=2765 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.147656][ T9851] sctp: [Deprecated]: syz-executor.0 (pid 9851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.147656][ T9851] Use struct sctp_sack_info instead [ 198.372744][ T9351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.479717][ T9879] loop3: detected capacity change from 0 to 512 [ 198.505628][ T9879] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 198.528150][ T9879] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 198.585212][ T9879] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 198.610659][ T9879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.623243][ T9879] ext2 filesystem being mounted at /root/syzkaller-testdir50784128/syzkaller.39Q8LT/29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.640442][ T29] audit: type=1400 audit(1717517095.964:3117): avc: denied { ioctl } for pid=9884 comm="syz-executor.0" path="socket:[42801]" dev="sockfs" ino=42801 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.670044][ T9885] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.707153][ T9329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.782120][ T9889] loop3: detected capacity change from 0 to 1024 [ 198.797167][ T9889] ext3: Unknown parameter 'pcr' [ 198.821682][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.831012][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.838563][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.858327][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.865859][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.886942][ T29] audit: type=1400 audit(1717517096.204:3118): avc: denied { ioctl } for pid=9890 comm="syz-executor.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41951 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.030435][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.031346][ T9902] loop4: detected capacity change from 0 to 128 [ 199.060504][ T9906] bond1: entered promiscuous mode [ 199.067056][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.086800][ T9904] vlan2: entered promiscuous mode [ 199.096363][ T9902] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 199.128599][ T9902] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 199.146852][ T9906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.166858][ T9906] bond2: entered promiscuous mode [ 199.182311][ T9906] bond1: (slave bond2): Enslaving as an active interface with an up link [ 199.195488][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.207416][ T9910] bond1 (unregistering): (slave bond2): Releasing backup interface [ 199.222882][ T9910] bond2: left promiscuous mode [ 199.238490][ T9910] bond1 (unregistering): Released all slaves [ 199.311394][ T9927] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.338159][ T9351] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.448382][ T29] audit: type=1400 audit(1717517096.774:3119): avc: denied { remount } for pid=9941 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 199.468496][ T9942] bpf: Bad value for 'gid' [ 199.607682][ T29] audit: type=1400 audit(1717517096.934:3120): avc: denied { create } for pid=9952 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 199.648885][ T29] audit: type=1400 audit(1717517096.964:3121): avc: denied { create } for pid=9952 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 199.669639][ T29] audit: type=1400 audit(1717517096.964:3122): avc: denied { setopt } for pid=9952 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 199.690285][ T29] audit: type=1400 audit(1717517096.964:3123): avc: denied { create } for pid=9952 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 199.710754][ T29] audit: type=1400 audit(1717517096.964:3124): avc: denied { bind } for pid=9952 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 199.730967][ T29] audit: type=1400 audit(1717517096.964:3125): avc: denied { node_bind } for pid=9952 comm="syz-executor.3" saddr=172.20.20.170 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=udp_socket permissive=1 [ 199.753574][ T29] audit: type=1400 audit(1717517096.964:3126): avc: denied { connect } for pid=9952 comm="syz-executor.3" laddr=172.20.20.170 lport=46269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 199.776840][ T29] audit: type=1400 audit(1717517096.964:3127): avc: denied { write } for pid=9952 comm="syz-executor.3" laddr=172.20.20.170 lport=46269 faddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 200.029590][ T9973] loop4: detected capacity change from 0 to 1764 [ 200.074665][ T9973] ISOFS: unable to read i-node block [ 200.080307][ T9973] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 200.134365][ T9973] loop4: detected capacity change from 1764 to 64 [ 200.233925][ T9984] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 200.242086][ T9984] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.372141][ T9989] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 200.452472][ T9993] loop3: detected capacity change from 0 to 512 [ 200.462784][ T9993] EXT4-fs: Ignoring removed nobh option [ 200.478137][ T9993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.489790][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.501781][ T9993] ext4 filesystem being mounted at /root/syzkaller-testdir50784128/syzkaller.39Q8LT/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.520099][ T9993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 224: padding at end of block bitmap is not set [ 200.536465][ T9993] EXT4-fs (loop3): Remounting filesystem read-only [ 200.547479][ T9993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.558125][ T9993] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.592246][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.602589][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.611588][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.620426][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.629538][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.636242][T10003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10003 comm=syz-executor.1 [ 200.638450][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.661840][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 200.672370][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.681778][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.694596][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.710914][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.720134][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.733834][T10005] loop1: detected capacity change from 0 to 512 [ 200.742294][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.752642][T10005] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.762064][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 200.772494][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.781391][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 200.790747][T10005] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 200.799774][T10005] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 200.809688][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.818665][T10005] System zones: 0-2, 18-18, 34-34 [ 200.823950][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.834563][T10005] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 200.850932][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 200.859884][T10005] EXT4-fs (loop1): 1 truncate cleaned up [ 200.866001][T10005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.879150][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.909700][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 200.938700][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.940140][ T9674] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir2621559518/syzkaller.OoXMwR/18/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 200.956248][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 200.999250][ T9674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.006743][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 201.026722][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 201.035782][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 201.044677][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 201.053557][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 201.062508][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 201.071472][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=17 [ 201.080465][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=17 [ 201.094483][ T9329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.180502][T10011] loop3: detected capacity change from 0 to 256 [ 201.238088][T10017] ================================================================== [ 201.246204][T10017] BUG: KCSAN: data-race in __d_instantiate / step_into [ 201.253054][T10017] [ 201.255369][T10017] write to 0xffff888107953270 of 8 bytes by task 10016 on cpu 0: [ 201.263090][T10017] __d_instantiate+0x1f9/0x3c0 [ 201.267849][T10017] d_instantiate_new+0x5c/0xf0 [ 201.272608][T10017] ext4_mkdir+0x5e6/0x740 [ 201.276935][T10017] vfs_mkdir+0x1f4/0x320 [ 201.281201][T10017] do_mkdirat+0x12f/0x2a0 [ 201.285550][T10017] __x64_sys_mkdir+0x44/0x50 [ 201.290132][T10017] x64_sys_call+0x10d4/0x2d70 [ 201.294817][T10017] do_syscall_64+0xc9/0x1c0 [ 201.299343][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.305236][T10017] [ 201.307556][T10017] read to 0xffff888107953270 of 8 bytes by task 10017 on cpu 1: [ 201.315179][T10017] step_into+0x123/0x810 [ 201.319437][T10017] link_path_walk+0x49d/0x810 [ 201.324142][T10017] __filename_parentat+0x13c/0x3c0 [ 201.329244][T10017] do_renameat2+0x2ee/0xa60 [ 201.333747][T10017] __x64_sys_rename+0x5c/0x70 [ 201.338477][T10017] x64_sys_call+0x2781/0x2d70 [ 201.343162][T10017] do_syscall_64+0xc9/0x1c0 [ 201.347686][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.353599][T10017] [ 201.355910][T10017] value changed: 0x0000000000000000 -> 0xffff88810788ced8 [ 201.363016][T10017] [ 201.365331][T10017] Reported by Kernel Concurrency Sanitizer on: [ 201.371468][T10017] CPU: 1 PID: 10017 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 2024/06/04 16:04:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 201.381980][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 201.392030][T10017] ================================================================== [ 201.422492][T10019] loop4: detected capacity change from 0 to 256