last executing test programs: 34.497757745s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffdce) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020006) 34.423525416s ago: executing program 1: r0 = memfd_create(&(0x7f0000000ac0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\n\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p\x12\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`w\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1c\xbc\x92\x1c\x13\x8ez\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xcc{\x9d\xf1\xbd\xb0\xc7\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa79\xe8q\xf1,\xf4\x95\x1a\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xef\t\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0Zt\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4y(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r3 = dup(r2) write$P9_RGETATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r3) rt_sigreturn() r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r4, 0x0, 0xfffffdf5, 0x0, 0x0, 0x1f) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = dup(r0) ioctl$TIOCGSID(r5, 0x541b, 0x0) 34.212972069s ago: executing program 1: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$unix(0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000880)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xbd\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xc0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd67\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\x9e\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfb\n\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x03\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\x05\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x84h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\aJq\xcb3=M\x84\x7f\x18Cb\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xccr?\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Pc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xf0/\x9d6\x8aK\x18\\2\xb0Q\xa3\aPv\xd1u/\x96\x1d\x15\x88\n\xc5=Y\'\x1aE\xbbYk\x9d\xf1\xaa@\xce\x05o\xf7$\x1c\x9d\xfe*`\xc9\x9d\x15\x0e\xa8HO)\x1aJ\xadr#\x9f[lHV7o\xefed\x95\xc3\xb2[e\x91\xf1\xb0\xf3=\x04\xc9\xbe\xfcu\xa9!\x13\x8c\xce\xc3\xc6\xadg-\xa8j\xa1<\xd9\x18\x16tz.\xdd\xf6rn\x94S\xf9\xb4\x93\xc9\xa5!\xb8|g\xe0<\"\x0e\x86\xc6\x14vg\xbd\xbf\xecq\xd8\x8b\xefH\xe3\x15\x88`{\xa7\x0e\xe4k\x8eX\x89\xd3\xf5\xe6b\xff\x1f\x16\xb4\xadF\xcf\xda\x82\xd9z\xd2!P\x9b\v7+;\xc7\xd6\xad\x85\x021P1\xde6%<\xa5\x1e\xa9^8\x85Vr\xe3\xa4\xfbj\x9a\xb4\xd2\xfd\xf2\x0et\f2\xf8\xd8\x9eJ\xb6E*\xe5=\x85\xb4\xcc?\x04\xcd\x0f,zf\x81\t\x01\x96A\xb1\xdc\xb320\xc5\n2\xb1\x1c\b\x83\x0f\x1a\bO\xe9\xc9`\xd3\xdd\x01\x1fk;\xc0F)\xe6\x81\xfd\xc6n%6R\x99\xf1\x8ej\xdcJ\xd9i\x89\xcek\x03\xca\xb1I\xab\xb9\xd0\xfe\x1d\xb8,\f?\x00'/1207, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 32.859069518s ago: executing program 1: r0 = memfd_create(&(0x7f0000000100)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8T\xech\x18\xae\xd6;\x18\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)w\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\xb9\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc9\x81\rLJ\xc6\xa3\xd1\x91\xf5\x879\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth\xac\x9a~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x86p\x98\x9d\x1a\x8b\x88\xff\x05\x86\x9d\xe5.\xfc\xa2v\xb1\xff\xc6\xbd\xfa\xa5\x96|\xcb\xa5[\xabZ\xbd\a\xa1\x8a\xd0\x8b\xebG\xde\x82\xdb\xe3\x9f\x11\xea\x0e}\xeb\x8cX\xeft$\aW\xe7\xe5cL\xf4\xbd9\xcd,\x0fd{\x19\x98\xaa\x12\xad\xce\r$3j/\xda\xc1-X\xf1\x82\fC\xe9\x187\xd3\x84[\x92\f#\x00\xba\xd4b\b\xafr\x7f\x02i+)\xb7]\x98x\x13\xe3\xbc\x04\x1es\xa3\xd4\xdf\x0fZL\x94E\x81\xa1z\x88\x9a{\xbf\xe4\x1a\x81\x8a\xbf\x18/-M\x12\xe6\xdfvzJR\x83\xd5\x03\xf2\xc1\xce\xaf\xfa\xb8\xa7\v`1\xae\xe7\xab\x98*\xd9U\xfe\x9aE\xe5\x14\x10\xd0\xc8M\xf4\x99\xeb\b\x89\xa5\xe5\xbd\xb7\x92[<\x89\x95Y\b[-P\xbc\x9c\x85E\xcf\xf7\xc3\x86\n\xe7\xa9\xf8L\x89\x86\xbbc\x98$/5\x82\x85\xdad\x8e]\xcc\xff\x855\x9f\xa3\xe6w\x17\\\x0f\xec\xef\x00'/637, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000080)='net/rpc\x00') 31.874455119s ago: executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000100)='FROZEN\x00', 0x7) 16.188205276s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 16.128694636s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzLblt62IP0DQKhqJP1pafsjBi0YTDpqY6AHjqbYLqSzU0JoIIVo94NGQeDfe/QOMJ70Y9WTiVe+GhBguoKc1szMDS9ktXbplofv5JLP73syD974z83bezNttAH1rNHtJIrZGxJ8RMZxnby4wmr9du3J++t8r56eTqNff+SdplLt65fx0WbT8d1vyTL1e5De0qPfC+xFTtVr1TJEfXzj10fj82XMvzZ6aOlE9UT09eeTIwQN7hg5PHupKnFlcV3d9Ord759H3Lr41feziB79+l7V3a7G9OY5uGc33bkvPdruyHtvWlE4GetgQOlKJiOxwDTb6/3BUYtP1bcPxxhc9bRywpur1er3V9bmwWAfWsSR63QKgN8oLfXb/Wy53aehxT7j8an4DlMV9rVjyLQOR5oknB5fc33bTaEQcW/zvm2yJNXoOAQDQ7Mds/PNiq/FfGo/kiaHs5YFiDmUkIh6MiO0R8VBE7IiIhyMaZR+NiMc6rH/pDMmt45/00h0HtwLZ+O+VYm7r5vFfWhYZqRS5bY34B5Pjs7Xq/mKf7IvBDcdnk+rEMnX89PofX7Xb1jz+y5as/nIsWLTj0sCSB3QzUwtTq4m52eXPI3YNtIo/iXIaJ4mInRGx6w7rmH2+/YTQ7eNfRhfmmerfRjyXH//FWBJ/KWk7Pznx8uHJQ+Mbo1bdP16eFbf67fcLb7erf1Xxd0F2/De3PP+vxz+SbIyYP3vuZGO+dr7zOi789WXbe5oOz/+j24rzfyh5t7FiqNjwydTCwpmJiKHkzVvXT97438p8WT6Lf9/e1v1/e9zYE49HxO6I2BMRT2Q3hUXbn4qIpyNi7zLx//LaMx92Hv8yT+W7KIt/5nbHP5qPf+eJysmff+g8/lJ2/A82UvuKNSv5/FtpA1ez7wAAAOB+kTa+A5+kY9fTaTo2ln+Hf0dsTmtz8wsvHJ/7+PRM/l35kRhMyyddw03PQyeKZ8NlfnJJ/kDx3PjryqZGfmx6rjbT6+Chz21p0/8zf1d63Tpgzfm9FvQv/R/6l/4P/SnR/6Gv6f/Qv1r1/8/alh77fk0bA9xVrv/Qv1bQ/xfzt/ajAuD+5PoP/Uv/h77U9rfx6ap+8i+x7hOR3hPNWP+JgRX/MYsOEvXhvP9naza0LNPrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+D8AAP//Yz/jTQ==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15.77193934s ago: executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000c80)=""/273, 0x111}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000800)=""/146, 0x92}, {&(0x7f0000000740)=""/150, 0x96}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f0000003880)=""/4076, 0xfec}], 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007e830864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4930037e70e4509c5bbee217d5c4961cd5a6ede7ca3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.681356594s ago: executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$TUNSETIFF(0xffffffffffffffff, 0x80084503, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40044582, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) 15.526105438s ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x20002, 'sed\x00'}, 0xfffffffffffffd09) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r3, 0x20, &(0x7f00000002c0)={&(0x7f0000000080)=""/55, 0x37, 0x0, &(0x7f0000000400)=""/137, 0x89}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, r4, r2, 0xfffffffffffffe06, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 15.44723645s ago: executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000006600000066000000080000000e0000000000000e0000000000000000060000000000000700000000000000000000000b050000000a0000000000000803000000020000000100000f0200000002000000040000007f0000002d2300000000000000030000000001000000030000003f000000000000c05f00da306100cecabe111af3155ae1beed76ddfac029239f6fe9b8e6da5dbc5901728248f19f893995ea1788e75cd860866b5dd66145ec8dfd632aa68fa2f053ebe2d4b09abf01be0ce5ba2461449c5701c8a4b6366c6c09fda356327964b450d45f3c4327bcf2d649df041c49649dddcf4edc49b972dbe1a3128e2b047889602b4fa12e6bfe8ce65f4b68c9c625b582e2a2ad11c619ef2df4461a953e257e216f79ad0864c624e80c8c24f060cf8b6e28262613a81736b4746adfb2fdb52722fb137c4da9d75707d171b7"], 0x0, 0x88, 0x0, 0x1}, 0x20) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000000000000008, 0x9}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380)=r5, 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r8, &(0x7f0000000340)='FREEZING\x00', 0x49) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r4, 0xa000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f040e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0x1092, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.240720375s ago: executing program 3: setitimer(0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xd0000, &(0x7f00000003c0)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYBLOB="cc09884e5e9c35ff1a18c2bc51046a1b897e8d02c48dd60f6c3e7ff46b04ff47a1c3f1b2ac32d916c37b459e21ed5b61", @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f0000000fc0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000800)) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) 1.924169423s ago: executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "28d7b07d54891881fe02c1203fe49607b9f26fdae8161583f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0", 0x3}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x18, 0x34, 0x9, 0x0, 0x25dfdbfe, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x7c, &(0x7f0000000180)={r9}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1={0xff, 0x0}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000004c0)="8aea78d69eef122166bf745c035f83e8bfca7552b2f257e15d8315da79cbfe4ec46f7e93f48a84b8c784e32cfe25f6f1041374a86ebbfeb4809ca9384664961024d9d7ddbef5f760a8c03225bf70890ea8ab43ad10e657146174e13cf9f9c05bef23a02c13cc1d510a220a88d36d154af630d850f6b639bf13a8688b238f85bc1d92aeb721c18d18f4adaf3fdb3eaae33956991a91c59aa3c684f7b78b45f4612476278f7779631089c7e82cf476e6644d0d2dd50c48e62f349ea67d37e803a04d5a1173a27325ea15b1ebcda9e7d68d902355acde5eaf46b02eebc4e396c3ce866295119527", &(0x7f00000005c0)=@tcp=r10, 0x4}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r11, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 1.87726152s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3650}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) fspick(0xffffffffffffff9c, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0xff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.437626299s ago: executing program 2: setitimer(0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xd0000, &(0x7f00000003c0)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYBLOB="cc09884e5e9c35ff1a18c2bc51046a1b897e8d02c48dd60f6c3e7ff46b04ff47a1c3f1b2ac32d916c37b459e21ed5b61", @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f0000000fc0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000800)) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) 1.399672235s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000c80)=""/273, 0x111}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000800)=""/146, 0x92}, {&(0x7f0000000740)=""/150, 0x96}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f00000004c0)=""/248, 0xf8}, {0x0}], 0x7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007e830864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4930037e70e4509c5bbee217d5c4961cd5a6ede7ca3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.288936552s ago: executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "28d7b07d54891881fe02c1203fe49607b9f26fdae8161583f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0", 0x3}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x18, 0x34, 0x9, 0x0, 0x25dfdbfe, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x7c, &(0x7f0000000180)={r9}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x2831cde3, 0x1, 0x4, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3}, 0x48) r11 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1={0xff, 0x0}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r10, &(0x7f00000004c0)="8aea78d69eef122166bf745c035f83e8bfca7552b2f257e15d8315da79cbfe4ec46f7e93f48a84b8c784e32cfe25f6f1041374a86ebbfeb4809ca9384664961024d9d7ddbef5f760a8c03225bf70890ea8ab43ad10e657146174e13cf9f9c05bef23a02c13cc1d510a220a88d36d154af630d850f6b639bf13a8688b238f85bc1d92aeb721c18d18f4adaf3fdb3eaae33956991a91c59aa3c684f7b78b45f4612476278f7779631089c7e82cf476e6644d0d2dd50c48e62f349ea67d37e803a04d5a1173a27325ea15b1ebcda9e7d68d902355acde5eaf46b02eebc4e396c3ce866295119527", &(0x7f00000005c0)=@tcp=r11, 0x4}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r12, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r12, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 1.228109361s ago: executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000f8ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b71f00000800000085000000a50000b551200000000000851000000200000095a4227b0c16ca62454da8cbdf27732872dde19ec25328924a44826c5120a8f5e6297800ba4cfc9e70d495314fc0d344c8856c90ed6de97330fea4c5eabfadcb3193b4af7243caf464a76cacd401fb3d7ee4172dae4220450d033a15784236fea3ec4219b81ab2a994428395508d9e4f2e6d78baa5ebb6e66f1050dbb0b113a7bc7f24e9e8dc2dda9c8611e0ee8c8e32a7905d9eee5fd1fddbb47b665a12525d843e09527f86911fb5a45dec72b6e513d44ef144e813184c2cef589e4a404589fca88ffc6f4a"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) time(0xfffffffffffffffc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000003007df800000000000000000900020073797a32000000000800410072786500140033007465616d5f736c6176655f3100000000"], 0x38}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x208000, 0x800}, 0x20) time(&(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@deltfilter={0x44, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x1a}, {0x0, 0x4}, {0xd, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xd4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x25}]}}]}, 0x44}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{}, {0x5}, {0x6}]}) prlimit64(0x0, 0x30, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)="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", 0x10d}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.110331299s ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0xb8, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x88, 0x2, {{0x0, 0xff13, 0x9, 0x0, 0xfffffffb, 0x10f}, [@TCA_NETEM_REORDER={0x0, 0x3, {0x80}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x202}}]}, @TCA_NETEM_DELAY_DIST={0xffffffaa, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46"}]}}}]}, 0xb8}}, 0x80) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 1.092773402s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @remote, {[@generic={0x0, 0x2}]}}, @timestamp_reply}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, &(0x7f00000001c0)={0x1f, 0x5566, 0xed, 0x7, 0x7fff, 0x7, 0x959, 0x9b02, 0x69}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c00198008000100ad0400003c0001800c00028005"], 0x5c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0xc0481273, &(0x7f0000000000)) 934.988836ms ago: executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000140000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x14000000, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000080)) lseek(r4, 0x0, 0x1) socket$inet6(0xa, 0x0, 0x0) epoll_create(0x19) 874.641955ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x14, 0x4, 0x8, 0x101}, 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x210c82, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="dc74498c2d38115bf79a5b9c2d4830c6455643dec4a1133ffd5c39c62120084790791542d301a84637a86741a7b02a3591fd4342bb218997bd68493697f278077f6c450f90608a30a15bef429f7d049261115dc852a266afe812167c97c4f93c7f65f3f8a4222f3f2825aa355f14a79c477b42102182b73f6a68b43ff8c05f20e3095b53e968acfdfd3cb9ccbb7e1d8b65074f74c256ab3043964bbfc615c762d107"], 0x2, 0x1227, &(0x7f0000003a40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003940)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88c8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14}}, 0x100}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f065de", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x8, 0x1014}, 0x48) renameat2(r2, &(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)={0xbb8, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x8000}, 0x9, 0x4, 0x8, 0x1f, 0xc, 'syz0\x00', "a7f7d4559367398d98de4dd308dff2780a391f20c2a3d41d9910606656c9669a", "0e48934eb5f3d7d97eb962c8a96819f65442ebd7ac15fdc3def3e5e40f7a7781", [{0x0, 0x20, {0x3, 0x7}}, {0x3, 0x92c, {0x3, 0x2}}, {0xffff, 0x1000, {0x3, 0x7}}, {0x80, 0x20, {0x1, 0x5}}, {0x7, 0x101, {0x0, 0x3f}}, {0xa3dc, 0x4, {0x3, 0x4}}, {0x2, 0x3f, {0x1, 0x7fff}}, {0x8, 0x7ff, {0x2, 0x9}}, {0xfff8, 0x7fff, {0x3, 0x4}}, {0x0, 0x9, {0x2, 0x8000}}, {0x0, 0x3, {0x1, 0x200}}, {0x7ff, 0x80, {0x3}}, {0x8, 0x0, {0x1, 0x9}}, {0x80, 0x1, {0x3, 0x3}}, {0x5, 0x6, {0x3, 0x8}}, {0xb2b4, 0x1, {0x1, 0x6}}, {0x4, 0x1, {0x2}}, {0x800, 0x3, {0x1, 0x3b681fa9}}, {0x1, 0x1f, {0x2, 0x6}}, {0xfff, 0x725, {0x1, 0xa9}}, {0x9, 0xe09, {0x3, 0xce2}}, {0x1, 0x9, {0x0, 0x7}}, {0x5, 0x7, {0x2, 0x5}}, {0x800, 0x26, {0x1, 0xc3}}, {0x6, 0x8, {0x3, 0xc57}}, {0x9, 0x6560, {0x2, 0x7}}, {0x41f, 0x200, {0x3, 0x9}}, {0x2, 0x0, {0x1, 0x7}}, {0xdb1d, 0xfffb, {0x3, 0x9}}, {0x3, 0x8, {0x1, 0x124}}, {0x2, 0x7, {0x1, 0x3}}, {0x401, 0x3, {0x2, 0x7ff}}, {0x20, 0x9, {0x0, 0x8}}, {0x5, 0x5, {0x3, 0x3}}, {0xfff7, 0x7fff, {0x2, 0x7}}, {0x40, 0x3, {0x1, 0x2}}, {0x4, 0x7, {0x0, 0x7}}, {0x7, 0x8, {0x0, 0x7}}, {0x8, 0xfff, {0x0, 0x200}}, {0x7ff, 0x6, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x0, 0x4, 0x7fff, 0x3, 0xf, 'syz0\x00', "e4f863b04d9058b4e6dd7384e6c3a83dca959374c1856dbfecc7e17ed8a73c37", "ae70035c41ae300a864f6f18e86d7c5212891944eb7a56921471dc07f31bfadd", [{0x3, 0x40, {0x2, 0x5}}, {0x3f, 0x5, {0x1, 0x2}}, {0x5, 0x8d9, {0x2, 0x3c0}}, {0x0, 0x1, {0x2, 0x8}}, {0x400, 0x6, {0x2, 0x3}}, {0x8, 0x8, {0x2, 0x8}}, {0x2, 0x3f, {0x0, 0x4}}, {0x4, 0x3, {0x2, 0x4eb}}, {0x8, 0x7ff, {0x3, 0x81}}, {0xf243, 0x6f70, {0x0, 0x6}}, {0x2, 0x2, {0x3, 0x5d}}, {0x3, 0x800, {0x2, 0x3}}, {0x838d, 0x8, {0x2, 0x8}}, {0x0, 0x5, {0x2, 0x2776}}, {0x8, 0x40}, {0x7, 0x100, {0x3, 0x9}}, {0x5, 0x7988, {0x3, 0x3f}}, {0x0, 0x3f, {0x3, 0x6}}, {0x40, 0x6, {0x3, 0x7fffffff}}, {0x3, 0x0, {0x2, 0x100}}, {0x5504, 0x0, {0x0, 0x1000}}, {0x5, 0x2, {0x0, 0x4}}, {0x3e6c, 0xcc1, {0x0, 0x20}}, {0x4, 0xfff, {0x1, 0x9}}, {0xfff7, 0x7, {0x1}}, {0xad2, 0x2981, {0x3, 0x9}}, {0x0, 0x4, {0x0, 0x9}}, {0x7fff, 0x1ff, {0x3}}, {0x9, 0x80, {0x3, 0x40}}, {0x6, 0x20, {0x3, 0x6}}, {0x8000, 0x0, {0x3, 0x5}}, {0x2, 0x123c, {0x1, 0x24}}, {0x1ac3, 0x1, {0x1, 0x2}}, {0x20, 0x0, {0x2, 0x8}}, {0x400, 0x9, {0x1, 0xf8}}, {0x1f, 0x100, {0x1, 0x3}}, {0x4, 0xe60, {0x2, 0x6}}, {0x7f53, 0x7, {0x0, 0x6}}, {0x20, 0x5, {0x3, 0x58e}}, {0x2, 0x3, {0x3, 0x101}}]}}}, {{0x254, 0x1, {{0x0, 0x1000}, 0x1e, 0xa8, 0x8, 0x13b8, 0x9, 'syz0\x00', "a15da60747b8843e2ad57f5a87747ae0e5854174666f9ce2cbb4d0897fb0234f", "7d08a876c6c59fc0411a4048222c3f745a294340ad308898fa02420b94ea42cb", [{0x9, 0x8, {0x2, 0x4}}, {0x6, 0x8, {0x2, 0x1}}, {0x5, 0x7, {0x3, 0x9}}, {0xfff9, 0x1, {0x1, 0x6}}, {0x70, 0x0, {0x0, 0xfffffffd}}, {0xf3e, 0x2, {0x1}}, {0x1, 0x46c4, {0x2, 0x1}}, {0x400, 0x2, {0x0, 0xffffff74}}, {0x1, 0x1, {0x2, 0x8}}, {0x800, 0x2, {0x1, 0x7}}, {0x2000, 0x81, {0x1, 0x8000}}, {0x7, 0xffc1, {0x3}}, {0xfffd, 0x4c1c, {0x2, 0x9}}, {0xfff, 0x400, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x4}}, {0x80, 0x3, {0x0, 0x6}}, {0x2, 0x7, {0x1, 0x3}}, {0x70c0, 0x2, {0x1, 0x139e}}, {0x9, 0x0, {0x1, 0x1}}, {0x5, 0x5, {0x3, 0x1}}, {0x7, 0x6, {0x0, 0xffff}}, {0x56aa, 0x7, {0x3, 0x2}}, {0x8001, 0x393, {0x3, 0x400}}, {0x7, 0x6, {0x2, 0x1}}, {0x3f, 0x9, {0x0, 0x3}}, {0x200, 0x8, {0x1, 0x4}}, {0x8001, 0x2, {0x2, 0x80000000}}, {0xfffc, 0xd6f, {0x3}}, {0x101, 0x4, {0x0, 0x800}}, {0x6, 0x8, {0x1, 0x80fa}}, {0x3, 0x9, {0x1, 0xfffff3fb}}, {0x8, 0x2, {0x0, 0x80000000}}, {0x20, 0x8001, {0x3, 0x4}}, {0x8, 0x596, {0x0, 0x22d}}, {0x4, 0x5, {0x2, 0x8}}, {0x7, 0x85, {0x3, 0x7ff}}, {0x8, 0x4, {0x2, 0x843}}, {0xffff, 0x8, {0x2, 0x7}}, {0x100, 0x100, {0x2, 0x1838000}}, {0x4b37, 0x81, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xb2, 0x1, 0x3ff, 0x6, 0x17, 'syz1\x00', "261d03c153713f36a3d89dfdec3be51c3344b14920936a4ade651893e3bfe53d", "9e29f2ad998857532347ce9fd71e89d5d688096c0ace8485dfa20fd05c350007", [{0x8, 0x9, {0x0, 0x3}}, {0x800, 0x8c, {0x3, 0x4}}, {0x1, 0x4, {0x2, 0x80000000}}, {0x0, 0x9, {0x3}}, {0x7, 0x2, {0x2, 0x4}}, {0xfff, 0x7ff, {0x1, 0x4}}, {0x8, 0x93, {0x3, 0x7f}}, {0xfff, 0x4, {0x3}}, {0x1, 0x8000, {0x0, 0x80000001}}, {0x8, 0x8, {0x3, 0xffff}}, {0x8, 0x3, {0x0, 0xd60}}, {0x0, 0x40, {0x1, 0x20}}, {0x9, 0x401, {0x2, 0x6ccb}}, {0x8, 0x6, {0x3, 0x5}}, {0xffff, 0x0, {0x2, 0x3ff}}, {0x4, 0x4, {0x0, 0x724}}, {0x0, 0x200, {0x1, 0x10001}}, {0x3f, 0x5, {0x0, 0x6}}, {0x415a, 0x5, {0x1, 0x2}}, {0xfff7, 0x0, {0x0, 0x1000}}, {0xc0, 0x7, {0x1, 0xffff}}, {0x40, 0x7, {0x0, 0x8}}, {0x401, 0x3, {0x2, 0x589}}, {0x7f, 0x0, {0x2, 0x6}}, {0x9, 0x8, {0x1, 0x7}}, {0x7, 0x2, {0x1, 0x6}}, {0x8be, 0x9, {0x0, 0x9}}, {0xfffe, 0x1, {0x1, 0x5c2c}}, {0x3, 0x8, {0x3, 0x8001}}, {0x75b, 0x0, {0x1, 0x1}}, {0x6, 0x0, {0x2, 0x400}}, {0x4, 0x1000, {0x3, 0x8}}, {0x0, 0x3e21, {0x1, 0x2}}, {0xc, 0x6, {0x1, 0x401}}, {0x1, 0x1, {0x1, 0x4}}, {0x0, 0xf000, {0x3, 0x800}}, {0x3, 0x8000, {0x1, 0x800002}}, {0xffff, 0xc10, {0x5, 0x81}}, {0xc140, 0x6, {0x1, 0x3}}, {0x3, 0x8, {0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x7c}, 0x1, 0x5, 0x3, 0x3f, 0xc, 'syz1\x00', "2eb09e4d4a96a6f0c1774ec5e2f93c86577fc50260a471322822516288a8f532", "20506e49ca578389d41b13e598e1abd1f96ecb2debaa3409a8bdeeffdf64c25b", [{0x9, 0x7f, {0x2, 0x5}}, {0x8, 0x6a, {0x3, 0x4}}, {0x3f, 0x2, {0x2, 0x7}}, {0x4, 0x1ff, {0x2, 0x1}}, {0x100, 0x0, {0x0, 0x1}}, {0x6, 0xcf, {0x1, 0x1}}, {0xff, 0x8, {0x1, 0x491}}, {0x5, 0x9, {0x0, 0x1fa4}}, {0x4047, 0x7, {0x2, 0xffffffff}}, {0x7f, 0x9}, {0xff7f, 0x1, {0x0, 0x6}}, {0x5, 0x2, {0x1, 0x2}}, {0x101, 0x6, {0x2, 0x81}}, {0x4, 0x2, {0x3, 0x1}}, {0x4, 0xe5, {0x0, 0x9}}, {0xdf, 0x4, {0x1, 0x5}}, {0x50, 0x1000, {0x3, 0x800}}, {0x0, 0xff, {0x3, 0x10001}}, {0x69, 0x1, {0x0, 0x95}}, {0xfffd, 0x6, {0x3, 0x10000}}, {0x5, 0x100, {0x2, 0x7f}}, {0x2, 0xff, {0x0, 0x1}}, {0x4ad, 0x2, {0x1, 0x8}}, {0x80, 0x812, {0x1, 0x4}}, {0x9, 0x1ff, {0x1, 0x2}}, {0x8001, 0x3, {0x0, 0x4}}, {0x8126, 0x20, {0x2, 0x7f}}, {0x5, 0x5, {0x1, 0x6}}, {0xd532}, {0xffe1, 0x9, {0x0, 0x8e2}}, {0x7ff, 0x8, {0x0, 0x5}}, {0xc56, 0x9, {0x3, 0x4}}, {0x0, 0x7}, {0x2, 0x7fff, {0x3, 0x7fffffff}}, {0x20, 0x1, {0x0, 0x6}}, {0x3, 0x4, {0x3, 0x7}}, {0x27, 0x8, {0x2, 0x7fffffff}}, {0x9, 0xff55, {0x2, 0x6}}, {0xccc6, 0x2, {0x1, 0x10001}}, {0x8001, 0x3, {0x0, 0x5}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x5410, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") 703.161132ms ago: executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x20, &(0x7f00000034c0)={&(0x7f0000001080)=""/120, 0x78, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x54484249a12fceef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) 300.495924ms ago: executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000055ad000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="8e49f73ac8d0445075987f1383936bb3f9daf132223a0e33a9fb1bb14729a2b885433c0916b8fe10646bc4553ca5f16d9247ca35664feb16c18b0720e8af092267309ecd32998038d9049e72451ee6a98629d300fe4c20c413b24b5d", @ANYRES64=r1, @ANYBLOB="c3484de219559c1cba5cc56983061b3a68ab2750c726276fdced208decf05f", @ANYRES16=r1], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='sync\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x80000001}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="007db9b129e889cd3c1406f045f3f61df16b1a301ff4eb0db8b28415feb08f57051d2d35b3664e8b8dd4cb4a22984102769c3915"], 0x2, 0x598, &(0x7f00000009c0)="$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") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000002c0)) lseek(r7, 0x0, 0x3) 170.043444ms ago: executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000055ad000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="8e49f73ac8d0445075987f1383936bb3f9daf132223a0e33a9fb1bb14729a2b885433c0916b8fe10646bc4553ca5f16d9247ca35664feb16c18b0720e8af092267309ecd32998038d9049e72451ee6a98629d300fe4c20c413b24b5d", @ANYRES64=r1, @ANYBLOB="c3484de219559c1cba5cc56983061b3a68ab2750c726276fdced208decf05f", @ANYRES16=r1], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='sync\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x80000001}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="007db9b129e889cd3c1406f045f3f61df16b1a301ff4eb0db8b28415feb08f57051d2d35b3664e8b8dd4cb4a22984102769c3915"], 0x2, 0x598, &(0x7f00000009c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f00000002c0)) lseek(r7, 0x0, 0x3) 168.671604ms ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10020, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0xe531, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (rerun: 64) setresuid(0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000140), 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0}, 0x90) (rerun: 32) write$binfmt_script(r5, &(0x7f00000000c0), 0x10f) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="34b00000", @ANYRES16=r9, @ANYBLOB="00012abd700000000000160000000500030001000000050002000100000005000200010000000500040000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r5, 0x0) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000070000000000500000009500"/33], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4000010, r11, 0x1000) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="05005986d600000000000000005f0000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003fae8a9ad451a727"], 0x48}}, 0x0) sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000080800000000000000200000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000000000000000002d321210305fdd5c03c5d1f8a57fa7aa6444089990f7560d5cbbf98876cebe698acbb563fafdd608e6eac401d230f1662d4797e39aed927a9d92efd5acfaed9d"], 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES8=r7, @ANYRESOCT=r13, @ANYRES64=r8, @ANYRES16=r1, @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) 101.741455ms ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 84.044667ms ago: executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "28d7b07d54891881fe02c1203fe49607b9f26fdae8161583f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0", 0x3}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x18, 0x34, 0x9, 0x0, 0x25dfdbfe, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x7c, &(0x7f0000000180)={r9}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x2831cde3, 0x1, 0x4, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3}, 0x48) r11 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1={0xff, 0x0}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r10, &(0x7f00000004c0)="8aea78d69eef122166bf745c035f83e8bfca7552b2f257e15d8315da79cbfe4ec46f7e93f48a84b8c784e32cfe25f6f1041374a86ebbfeb4809ca9384664961024d9d7ddbef5f760a8c03225bf70890ea8ab43ad10e657146174e13cf9f9c05bef23a02c13cc1d510a220a88d36d154af630d850f6b639bf13a8688b238f85bc1d92aeb721c18d18f4adaf3fdb3eaae33956991a91c59aa3c684f7b78b45f4612476278f7779631089c7e82cf476e6644d0d2dd50c48e62f349ea67d37e803a04d5a1173a27325ea15b1ebcda9e7d68d902355acde5eaf46b02eebc4e396c3ce866295119527", &(0x7f00000005c0)=@tcp=r11, 0x4}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r12, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r12, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 0s ago: executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000020400181100", @ANYRESHEX, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv2(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0xffffffff, 0x9, 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01030000000000000000050000000e0001006e657464657673696d0008000f0002"], 0x34}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000580)="04fe9771816ee16d7308bf78789b9d2a4b7b23004fa1e9972e7efa2e6d4f8facf42cc7ffd79a63e4f522517d50939932b85684263e8460872f63acaa4cfad7101dba3c6b1770bd420e3e8763a320ac39b2d5c807138a14a3a1a143fe56586a4b28359432de1ef68579cf4ba8f6e41a5afa644aaab08054718abf3fc1bb6230c1d4a058fdff7616205b8d5e5cdb1673140b2290fb04f7008726", 0x99}, {&(0x7f0000000700)="0393242b68fc5c527a6d2bfb20d88deac168b7349182426d1c8d1a1a7ef3d02db8fa3bf49dcc909d76bf5728c9f2e4371b8388334fa4a7fc19e979c5ad2af8a12e4da434cd734094eaff2b50ff0d835fd875481e6f0af406cc45cc232a146559e54b06a9afc7b114f26afe45bf47167a9f5aa24d3b3e547ad33f9828e9323668914cee69e3afca7cd223fc2ef7bd7d5b55467cd14227dad1fa2b2108d7099d6f141b6ebeddd5", 0xa6}, {&(0x7f00000017c0)="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", 0x1007}], 0x3}}], 0x1, 0x20040004) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r8, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000300)={0xf049, 0x0, 0x2, 0x1f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) syz_io_uring_setup(0x57aa, &(0x7f0000000080)={0x0, 0xfffffffe}, &(0x7f00000002c0), &(0x7f0000000040)) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x3ddfdbff, 0x80}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0xd) close(r9) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) kernel console output (not intermixed with test programs): zed): option min_links: invalid value (18446744073709551359) [ 634.796285][T27830] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 634.924712][T27830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 634.965209][T27832] syzkaller0: entered promiscuous mode [ 634.970699][T27832] syzkaller0: entered allmulticast mode [ 635.716918][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 635.780491][T27854] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 635.919558][T27858] loop1: detected capacity change from 0 to 512 [ 635.940722][T27858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.953524][T27858] ext4 filesystem being mounted at /root/syzkaller-testdir911242802/syzkaller.9x7Lou/46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 635.979996][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.044120][T27863] loop3: detected capacity change from 0 to 512 [ 636.052711][T27863] EXT4-fs (loop3): failed to initialize system zone (-117) [ 636.060083][T27863] EXT4-fs (loop3): mount failed [ 636.681869][ T29] audit: type=1326 audit(1718795632.888:38769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5194908f29 code=0x0 [ 636.738117][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.059471][T27884] loop1: detected capacity change from 0 to 512 [ 637.067482][T27884] EXT4-fs: Ignoring removed mblk_io_submit option [ 637.074192][T27884] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 637.083707][T27884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 637.091846][T27884] System zones: 1-12 [ 637.096230][T27884] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 637.111104][T27884] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 637.123890][T27884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.159359][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.176263][T27888] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 637.268760][T27891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 637.297574][T27894] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 637.453666][T27903] netdevsim netdevsim1 netdevsim2: Unsupported IPsec algorithm [ 637.539080][T27907] loop1: detected capacity change from 0 to 1764 [ 637.809796][T27929] loop3: detected capacity change from 0 to 512 [ 637.817584][T27929] EXT4-fs: Ignoring removed mblk_io_submit option [ 637.824523][T27929] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 637.845853][T27929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 637.865842][T27929] System zones: 1-12 [ 637.879424][T27929] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value size too large [ 637.909176][T27929] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 637.931062][T27929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.956144][T26716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.039046][T27937] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 638.055212][T27938] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 638.092365][T27940] veth0_to_team: Caught tx_queue_len zero misconfig [ 638.207739][ T29] audit: type=1326 audit(1718795634.300:38770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27947 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x0 [ 638.619734][T27968] loop0: detected capacity change from 0 to 1764 [ 638.679758][T27972] loop1: detected capacity change from 0 to 512 [ 638.688332][T27972] EXT4-fs: Ignoring removed mblk_io_submit option [ 638.701360][T27972] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 638.710968][T27972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 638.718950][T27972] System zones: 1-12 [ 638.725697][T27972] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 638.740630][T27972] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 638.755412][T27972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.795958][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.907930][T27977] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.918126][T27977] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 638.999256][T27989] loop0: detected capacity change from 0 to 1764 [ 639.017722][ T29] audit: type=1400 audit(1718795635.048:38771): avc: denied { remount } for pid=27988 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 639.215859][T28012] loop0: detected capacity change from 0 to 512 [ 639.223431][T28012] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.230225][T28012] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 639.250391][T28012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 639.274370][T28012] System zones: 1-12 [ 639.278737][T28012] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 639.306729][T28012] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 639.321364][T28012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.346399][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.422922][T28018] loop0: detected capacity change from 0 to 1764 [ 639.973829][T28027] loop1: detected capacity change from 0 to 512 [ 639.993384][T28027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.007259][T28027] ext4 filesystem being mounted at /root/syzkaller-testdir911242802/syzkaller.9x7Lou/66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.032550][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.268345][T28041] syzkaller0: entered promiscuous mode [ 640.273858][T28041] syzkaller0: entered allmulticast mode [ 640.690410][T28045] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 640.813511][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.922124][T28062] loop0: detected capacity change from 0 to 1764 [ 640.977301][T28065] tipc: Enabling of bearer rejected, failed to enable media [ 641.286485][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.320466][ T29] audit: type=1326 audit(1718795637.171:38772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28083 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5194908f29 code=0x0 [ 642.092431][T28092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28092 comm=syz-executor.1 [ 642.169475][T28103] loop3: detected capacity change from 0 to 512 [ 642.181491][T28103] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 642.195709][T28103] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 642.210167][ T29] audit: type=1326 audit(1718795637.983:38773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28098 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3754718f29 code=0x0 [ 642.234999][T28103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.297401][T26716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.467280][T28117] loop3: detected capacity change from 0 to 1764 [ 643.099990][T28131] loop1: detected capacity change from 0 to 256 [ 643.108098][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.115472][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.122438][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.129138][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.136297][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.143103][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.149878][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.156855][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.163631][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.170346][T28131] FAT-fs (loop1): Directory bread(block 1285) failed [ 643.271079][ T29] audit: type=1326 audit(1718795638.970:38774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28132 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3754718f29 code=0x0 [ 643.447829][T28138] loop0: detected capacity change from 0 to 512 [ 643.455488][T28138] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.463008][T28138] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 643.472413][T28138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 643.480490][T28138] System zones: 1-12 [ 643.484808][T28138] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 643.503268][T28138] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 643.515997][T28138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.539291][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.597004][T28141] tipc: Started in network mode [ 643.601911][T28141] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 643.611093][T28141] tipc: Enabling of bearer rejected, failed to enable media [ 643.622963][T28141] loop0: detected capacity change from 0 to 512 [ 643.631352][T28141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 643.643233][T28141] EXT4-fs (loop0): 1 truncate cleaned up [ 643.649292][T28141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.664689][T28141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.776557][T28146] loop3: detected capacity change from 0 to 1024 [ 643.783331][T28146] EXT4-fs (loop3): unable to read superblock [ 644.044985][T28154] loop3: detected capacity change from 0 to 1764 [ 644.243304][T28162] loop1: detected capacity change from 0 to 512 [ 644.251074][T28162] EXT4-fs: Ignoring removed mblk_io_submit option [ 644.259701][T28162] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 644.269671][T28162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 644.277659][T28162] System zones: 1-12 [ 644.283931][T28162] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 644.298503][T28162] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 644.311273][T28162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.331715][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.698264][T28175] loop0: detected capacity change from 0 to 512 [ 644.709103][T28175] EXT4-fs: Ignoring removed mblk_io_submit option [ 644.716240][T28175] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 644.727674][T28175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 644.735944][T28175] System zones: 1-12 [ 644.740307][T28175] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 644.758816][T28175] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 644.771655][T28175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.812397][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.735817][ T29] audit: type=1326 audit(1718795641.250:38775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28189 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3754718f29 code=0x0 [ 645.852029][T28194] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 645.904364][T28197] loop0: detected capacity change from 0 to 512 [ 645.912308][T28197] EXT4-fs: Ignoring removed mblk_io_submit option [ 645.919095][T28197] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 645.928578][T28197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 645.936620][T28197] System zones: 1-12 [ 645.941720][T28197] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 645.957642][T28197] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 645.972254][T28197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.998282][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.091807][T28201] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 646.113953][T28201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.130428][T28201] team0: Port device batadv0 added [ 646.212435][ T29] audit: type=1400 audit(1718795641.684:38776): avc: denied { mount } for pid=28204 comm="syz-executor.0" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 646.250606][T28205] geneve2: entered promiscuous mode [ 646.256063][T28205] geneve2: entered allmulticast mode [ 646.279374][ T29] audit: type=1326 audit(1718795641.749:38777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28206 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.304331][ T29] audit: type=1326 audit(1718795641.749:38778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28206 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.328592][ T29] audit: type=1326 audit(1718795641.776:38779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28206 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.352771][ T29] audit: type=1326 audit(1718795641.776:38780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28206 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.377039][ T29] audit: type=1326 audit(1718795641.776:38781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28206 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.414430][ T29] audit: type=1326 audit(1718795641.878:38782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28209 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.439011][ T29] audit: type=1326 audit(1718795641.878:38783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28209 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.463220][ T29] audit: type=1326 audit(1718795641.878:38784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28209 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 646.558413][T28216] loop3: detected capacity change from 0 to 2048 [ 646.600210][T28216] loop3: p1 < > p4 [ 646.604619][T28216] loop3: p4 size 8388608 extends beyond EOD, truncated [ 646.667359][T28216] loop3: detected capacity change from 0 to 512 [ 646.755635][T28222] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 646.757056][T28220] loop1: detected capacity change from 0 to 2048 [ 646.763789][T28222] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 646.816648][T28220] Alternate GPT is invalid, using primary GPT. [ 646.822942][T28220] loop1: p1 p2 p3 [ 646.887450][T28227] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 646.913629][T28227] team0: Port device dummy0 added [ 647.100254][T28246] geneve2: entered promiscuous mode [ 647.105586][T28246] geneve2: entered allmulticast mode [ 647.180646][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 647.290201][T28273] loop3: detected capacity change from 0 to 256 [ 647.299625][T28273] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 647.310067][T28273] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 647.320516][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 647.602618][T28285] loop0: detected capacity change from 0 to 2048 [ 647.610941][T28285] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615«Jˆ„8}…æ¼h ø‘²+Þu¥«µPq[Í" or missing value [ 648.348966][T28290] geneve2: entered promiscuous mode [ 648.354285][T28290] geneve2: entered allmulticast mode [ 648.427490][T28292] loop3: detected capacity change from 0 to 1024 [ 648.469167][T28292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.486717][T28292] ext4 filesystem being mounted at /root/syzkaller-testdir2566454747/syzkaller.fD68Ux/108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.683954][T26716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.715832][T28302] wg1: Master is either lo or non-ether device [ 648.749290][T28307] loop1: detected capacity change from 0 to 512 [ 648.782855][T28307] loop1: detected capacity change from 0 to 512 [ 648.794487][T28307] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 288: padding at end of block bitmap is not set [ 648.811370][T28307] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 648.821681][T28307] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 1024 len 1 [ 648.835627][T28307] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 648.850352][T28307] EXT4-fs (loop1): 1 truncate cleaned up [ 648.856635][T28307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.891371][T28316] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 648.927283][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.996808][T28323] usb usb8: usbfs: process 28323 (syz-executor.1) did not claim interface 16 before use [ 649.031507][T28325] geneve2: entered promiscuous mode [ 649.037044][T28325] geneve2: entered allmulticast mode [ 649.177427][T28333] loop1: detected capacity change from 0 to 1764 [ 649.680132][T28345] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 649.690196][T28345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28345 comm=syz-executor.0 [ 649.738410][T28347] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 649.838691][T28351] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 649.845253][T28351] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.852900][T28351] vhci_hcd vhci_hcd.0: Device attached [ 649.864781][T28352] vhci_hcd: connection closed [ 649.865038][ T3125] vhci_hcd: stop threads [ 649.874084][ T3125] vhci_hcd: release socket [ 649.878557][ T3125] vhci_hcd: disconnect device [ 650.021324][T28359] loop3: detected capacity change from 0 to 1024 [ 650.029181][T28359] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 650.039137][T28359] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 650.049400][T28359] EXT4-fs error (device loop3): ext4_get_journal_inode:5752: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 650.063433][T28359] EXT4-fs (loop3): no journal found [ 650.068699][T28359] EXT4-fs (loop3): can't get journal size [ 650.075273][T28359] EXT4-fs (loop3): failed to initialize system zone (-22) [ 650.084294][T28359] EXT4-fs (loop3): mount failed [ 650.142933][T28359] bridge_slave_0: left allmulticast mode [ 650.148625][T28359] bridge_slave_0: left promiscuous mode [ 650.154462][T28359] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.444454][T28369] loop1: detected capacity change from 0 to 1764 [ 650.509002][T28372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 650.527367][T28372] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 650.884436][T28384] bond_slave_0: entered promiscuous mode [ 650.890249][T28384] bond_slave_1: entered promiscuous mode [ 650.896584][T28384] bond_slave_0: left promiscuous mode [ 650.902040][T28384] bond_slave_1: left promiscuous mode [ 650.923775][T28384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.943051][T28384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.960676][T28384] bond0 (unregistering): Released all slaves [ 650.977908][T28385] loop1: detected capacity change from 0 to 512 [ 650.985545][T28385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 650.999022][T28385] EXT4-fs (loop1): 1 orphan inode deleted [ 651.004836][T28385] EXT4-fs (loop1): 1 truncate cleaned up [ 651.011033][T28385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.061920][T28387] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 651.094416][T28387] EXT4-fs (loop1): Remounting filesystem read-only [ 651.556447][T28389] loop0: detected capacity change from 0 to 2048 [ 651.583987][T28389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.605265][T28389] ext4 filesystem being mounted at /root/syzkaller-testdir1409806756/syzkaller.yr4RyR/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.626722][T28389] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.766087][T28394] loop0: detected capacity change from 0 to 764 [ 651.781604][T28394] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 651.848195][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.866309][T28396] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 651.874080][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 651.874097][ T29] audit: type=1400 audit(1718795646.908:39275): avc: denied { setattr } for pid=28395 comm="syz-executor.0" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 652.151170][ T29] audit: type=1326 audit(1718795647.167:39276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28405 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5194908f29 code=0x0 [ 652.352439][T28410] chnl_net:caif_netlink_parms(): no params data found [ 652.399318][T28410] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.406486][T28410] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.415750][T28410] bridge_slave_0: entered allmulticast mode [ 652.424277][T28410] bridge_slave_0: entered promiscuous mode [ 652.431332][T28410] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.438495][T28410] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.445922][T28410] bridge_slave_1: entered allmulticast mode [ 652.453360][T28410] bridge_slave_1: entered promiscuous mode [ 652.468441][ T3125] bridge_slave_1: left allmulticast mode [ 652.474193][ T3125] bridge_slave_1: left promiscuous mode [ 652.479896][ T3125] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.487586][ T3125] bridge_slave_0: left allmulticast mode [ 652.493256][ T3125] bridge_slave_0: left promiscuous mode [ 652.499007][ T3125] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.602634][ T3125] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.612439][ T3125] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.621603][ T3125] @ (unregistering): (slave batadv0): Releasing backup interface [ 652.630305][ T3125] @ (unregistering): Released all slaves [ 652.645521][T28410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.656848][T28410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.679545][T28410] team0: Port device team_slave_0 added [ 652.686445][T28410] team0: Port device team_slave_1 added [ 652.697599][ T3125] tipc: Disabling bearer [ 652.703008][ T3125] tipc: Left network mode [ 652.711032][T28410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.718135][T28410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.744286][T28410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.755905][T28410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.762941][T28410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.788943][T28410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.802636][ T3125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.810416][ T3125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.819123][ T3125] team0: left allmulticast mode [ 652.824045][ T3125] team_slave_0: left allmulticast mode [ 652.829576][ T3125] team_slave_1: left allmulticast mode [ 652.835101][ T3125] team0: left promiscuous mode [ 652.839923][ T3125] team_slave_0: left promiscuous mode [ 652.845504][ T3125] team_slave_1: left promiscuous mode [ 652.875774][ T3125] pimreg (unregistering): left allmulticast mode [ 652.919499][ T3125] team0 (unregistering): Port device team_slave_1 removed [ 652.929796][ T3125] team0 (unregistering): Port device team_slave_0 removed [ 652.974886][T28427] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 653.004553][T28410] hsr_slave_0: entered promiscuous mode [ 653.011375][T28410] hsr_slave_1: entered promiscuous mode [ 653.017386][T28410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.025714][T28410] Cannot create hsr debugfs directory [ 653.031199][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 653.054618][T28429] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 653.083680][T28432] loop0: detected capacity change from 0 to 1764 [ 653.255213][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.339458][T28439] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.419699][T28410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.438495][T28410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.467993][T28410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.483757][T28410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 653.546114][T28410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.568469][T28410] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.584287][T28443] loop0: detected capacity change from 0 to 512 [ 653.584754][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.597709][ T8737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.603837][T28443] EXT4-fs: Ignoring removed mblk_io_submit option [ 653.625892][T28443] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 653.626539][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.641204][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.647732][T28443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 653.669337][T28443] System zones: 1-12 [ 653.679440][T28443] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 653.706589][T28443] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 653.730712][T28443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.763735][T28410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.815357][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.926542][T28410] veth0_vlan: entered promiscuous mode [ 653.936504][T28410] veth1_vlan: entered promiscuous mode [ 653.958769][T28410] veth0_macvtap: entered promiscuous mode [ 653.969546][T28410] veth1_macvtap: entered promiscuous mode [ 653.983539][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.994074][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.003929][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.014373][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.024234][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.034685][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.044704][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.055225][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.065095][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.075846][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.086035][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.096496][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.106357][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.116794][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.137336][T28410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.146107][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.156612][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.166632][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.177207][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.187224][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.197707][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.207604][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.218055][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.227928][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.238440][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.248355][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.258839][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.268752][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.279180][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.294004][T28410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.302225][T28477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 654.335983][T28410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.344748][T28410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.353661][T28410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.362653][T28410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.440065][T28490] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 654.489496][T28496] SELinux: security_context_str_to_sid (õȨY) failed with errno=-22 [ 654.501848][T28496] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.585780][T28502] loop0: detected capacity change from 0 to 1024 [ 654.595097][T28502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.607068][T28502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.629009][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.837435][T28520] loop0: detected capacity change from 0 to 128 [ 655.343333][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 655.361956][T28539] loop3: detected capacity change from 0 to 512 [ 655.376592][T28539] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.469058][T28553] loop4: detected capacity change from 0 to 512 [ 655.484931][ T29] audit: type=1326 audit(1718795650.249:39277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 655.510311][ T29] audit: type=1326 audit(1718795650.249:39278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 655.534635][ T29] audit: type=1326 audit(1718795650.249:39279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 655.560076][T28560] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 655.593848][ T29] audit: type=1326 audit(1718795650.314:39280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 655.618163][ T29] audit: type=1326 audit(1718795650.314:39281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a6bb0f29 code=0x7ffc0000 [ 655.642360][ T29] audit: type=1326 audit(1718795650.333:39282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28552 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f211c021f29 code=0x0 [ 655.648315][T28565] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 655.682061][T26716] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 655.728212][T28568] loop3: detected capacity change from 0 to 128 [ 655.800359][T28570] syz-executor.3: attempt to access beyond end of device [ 655.800359][T28570] md0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 655.813538][T28570] isofs_fill_super: bread failed, dev=md0, iso_blknum=16, block=32 [ 655.957896][T28578] loop3: detected capacity change from 0 to 128 [ 656.029318][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 656.135159][T28589] SELinux: security_context_str_to_sid (õȨY) failed with errno=-22 [ 656.144641][T28589] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 656.468868][T28599] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 656.498933][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 656.554591][T28609] loop1: detected capacity change from 0 to 512 [ 656.562154][T28609] EXT4-fs: Ignoring removed nobh option [ 656.569415][T28609] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 656.578949][T28609] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz-executor.1: casefold flag without casefold feature [ 656.592349][T28609] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 656.605536][T28609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.634330][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.797628][T28625] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 656.834982][T28625] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 657.026487][T28634] loop3: detected capacity change from 0 to 2048 [ 657.111339][T28634] loop3: p2 p3 p7 [ 657.593174][T28648] chnl_net:caif_netlink_parms(): no params data found [ 657.647378][T28648] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.654719][T28648] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.662298][T28648] bridge_slave_0: entered allmulticast mode [ 657.668984][T28648] bridge_slave_0: entered promiscuous mode [ 657.680323][T28648] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.687514][T28648] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.695407][T28648] bridge_slave_1: entered allmulticast mode [ 657.702007][T28648] bridge_slave_1: entered promiscuous mode [ 657.739429][ T1286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.762450][T28648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.776303][T28648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.810676][ T1286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.842440][T28648] team0: Port device team_slave_0 added [ 657.851198][T28648] team0: Port device team_slave_1 added [ 657.871969][ T1286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.894645][T28648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.901673][T28648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.927727][T28648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.939375][T28648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.946427][T28648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.972767][T28648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.000229][T28691] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 658.026980][ T1286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.041486][T28648] hsr_slave_0: entered promiscuous mode [ 658.058899][T28648] hsr_slave_1: entered promiscuous mode [ 658.064930][T28648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.072591][T28648] Cannot create hsr debugfs directory [ 658.119937][ T1286] bridge_slave_1: left allmulticast mode [ 658.125698][ T1286] bridge_slave_1: left promiscuous mode [ 658.131481][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.303572][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.314694][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.325126][ T1286] bond0 (unregistering): Released all slaves [ 658.427110][ T1286] hsr_slave_0: left promiscuous mode [ 658.434137][ T1286] hsr_slave_1: left promiscuous mode [ 658.440095][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.447558][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.455325][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.462867][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.487238][ T1286] veth1_macvtap: left promiscuous mode [ 658.493018][ T1286] veth0_macvtap: left promiscuous mode [ 658.498636][ T1286] veth1_vlan: left promiscuous mode [ 658.503902][ T1286] veth0_vlan: left promiscuous mode [ 658.544997][T28703] loop0: detected capacity change from 0 to 8192 [ 658.552103][T28705] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 658.624041][ T1286] team0 (unregistering): Port device team_slave_1 removed [ 658.634226][ T1286] team0 (unregistering): Port device team_slave_0 removed [ 658.668737][ T1286] team0 (unregistering): Port device dummy0 removed [ 658.691598][T28648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.735900][T28673] chnl_net:caif_netlink_parms(): no params data found [ 658.773025][T28673] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.780322][T28673] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.787707][T28673] bridge_slave_0: entered allmulticast mode [ 658.794721][T28673] bridge_slave_0: entered promiscuous mode [ 658.812538][T28648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.829010][T28673] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.836183][T28673] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.844415][T28673] bridge_slave_1: entered allmulticast mode [ 658.851029][T28673] bridge_slave_1: entered promiscuous mode [ 658.870276][T28673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.881409][T28673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.897992][T28648] @: (slave netdevsim1): Releasing backup interface [ 658.906548][T28648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.930580][T28673] team0: Port device team_slave_0 added [ 658.937628][T28673] team0: Port device team_slave_1 added [ 658.954551][T28673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.961564][T28673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.987750][T28673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.017109][T28648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.028900][T28673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.035911][T28673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.062017][T28673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.075459][T28720] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 659.122635][T28720] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 659.138983][T28673] hsr_slave_0: entered promiscuous mode [ 659.145306][T28673] hsr_slave_1: entered promiscuous mode [ 659.151764][T28673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.159337][T28673] Cannot create hsr debugfs directory [ 659.164814][T28648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.180936][T28648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.190529][T28648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.203477][T28648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.291579][T28648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.312375][T28648] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.322480][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.329585][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.355626][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.362737][ T8757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.423482][T28648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.460357][T28673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 659.472680][T28673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 659.481849][T28673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 659.490940][T28673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 659.565763][T28648] veth0_vlan: entered promiscuous mode [ 659.574649][T28737] __nla_validate_parse: 2 callbacks suppressed [ 659.574666][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.602807][T28648] veth1_vlan: entered promiscuous mode [ 659.615800][T28673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.643888][T28673] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.667396][T28648] veth0_macvtap: entered promiscuous mode [ 659.676442][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.683594][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.695965][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.703276][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.718654][T28648] veth1_macvtap: entered promiscuous mode [ 659.776717][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.787403][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.797332][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.802917][T28746] loop1: detected capacity change from 0 to 2048 [ 659.807917][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.824161][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.824181][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.824201][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.824276][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.824295][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.824310][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.824325][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.824340][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.824360][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.824378][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.826500][T28648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.831131][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831153][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.831168][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831227][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.831242][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831299][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.831312][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831327][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.831339][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831354][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.831366][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831381][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.831394][T28648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.831409][T28648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.838112][T28648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.850389][T28746] rtc_cmos 00:00: Alarms can be up to one day in the future [ 659.914639][T28648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.056839][ T3183] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.057634][T28648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.067747][ T3183] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.077935][T28648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.088102][ T3183] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.094999][T28648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.102564][ T3183] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.166816][ T3183] rtc rtc0: __rtc_set_alarm: err=-22 [ 660.185400][T28673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.346310][T28673] veth0_vlan: entered promiscuous mode [ 660.367653][T28673] veth1_vlan: entered promiscuous mode [ 660.409535][T28673] veth0_macvtap: entered promiscuous mode [ 660.421616][T28673] veth1_macvtap: entered promiscuous mode [ 660.448438][ T29] audit: type=1326 audit(1718795654.828:39283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194908f29 code=0x7ffc0000 [ 660.448881][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.483509][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.493475][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.499872][ T29] audit: type=1326 audit(1718795654.855:39284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5194908f29 code=0x7ffc0000 [ 660.503955][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.503998][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.528060][ T29] audit: type=1326 audit(1718795654.864:39285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194908f29 code=0x7ffc0000 [ 660.537847][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.537870][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.548294][ T29] audit: type=1326 audit(1718795654.864:39286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5194908f29 code=0x7ffc0000 [ 660.572364][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.572391][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.582401][ T29] audit: type=1326 audit(1718795654.874:39287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5194908f29 code=0x7ffc0000 [ 660.592855][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.616932][ T29] audit: type=1326 audit(1718795654.874:39288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51949066a7 code=0x7ffc0000 [ 660.626731][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.637195][ T29] audit: type=1326 audit(1718795654.874:39289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51948cc379 code=0x7ffc0000 [ 660.661229][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.661254][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.671144][ T29] audit: type=1326 audit(1718795654.874:39290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51949066a7 code=0x7ffc0000 [ 660.695106][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.695130][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.705552][ T29] audit: type=1326 audit(1718795654.874:39291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51948cc379 code=0x7ffc0000 [ 660.705583][ T29] audit: type=1326 audit(1718795654.874:39292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51949066a7 code=0x7ffc0000 [ 660.729566][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.856837][T28673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.865434][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.875987][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.885948][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.896536][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.906720][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.917196][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.927053][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.937497][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.947492][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.957921][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.967774][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.978228][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.988142][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.998658][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.008499][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.018957][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.031872][T28673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.046295][T28673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.055069][T28673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.063911][T28673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.072718][T28673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.138581][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 661.170959][T28807] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 661.184987][T28803] loop1: detected capacity change from 0 to 8192 [ 661.229199][T28812] loop3: detected capacity change from 0 to 512 [ 661.248292][T28812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.273033][T28812] ext4 filesystem being mounted at /root/syzkaller-testdir3079579722/syzkaller.Smw3M8/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.309648][T28673] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor.3: path /root/syzkaller-testdir3079579722/syzkaller.Smw3M8/1/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 661.918826][T28825] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 662.369134][T28842] syzkaller0: entered promiscuous mode [ 662.374743][T28842] syzkaller0: entered allmulticast mode [ 662.446528][T28854] random: crng reseeded on system resumption [ 662.641484][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 662.779748][T28870] loop0: detected capacity change from 0 to 8192 [ 663.187363][T28880] loop2: detected capacity change from 0 to 164 [ 663.360180][T28884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 663.440938][T28884] infiniband syz2: set active [ 663.445724][T28884] infiniband syz2: added veth0_to_bridge [ 663.467768][T28884] RDS/IB: syz2: added [ 663.471821][T28884] smc: adding ib device syz2 with port count 1 [ 663.488578][T28884] smc: ib device syz2 port 1 has pnetid [ 664.261819][T28913] syzkaller0: entered promiscuous mode [ 664.267352][T28913] syzkaller0: entered allmulticast mode [ 665.134046][T28936] loop1: detected capacity change from 0 to 512 [ 665.147696][T28936] EXT4-fs: Ignoring removed mblk_io_submit option [ 665.164717][T28938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 665.175807][T28936] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 665.224403][T28936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 665.232459][T28936] System zones: 1-12 [ 665.250442][T28936] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 665.295631][T28936] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 665.345722][T28936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.404261][T27326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.428728][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 665.575679][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.494574][T28975] loop0: detected capacity change from 0 to 512 [ 666.502614][T28975] EXT4-fs: Ignoring removed mblk_io_submit option [ 666.509470][T28975] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 666.534084][T28975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 666.542227][T28975] System zones: 1-12 [ 666.546582][T28975] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 666.564432][T28975] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 666.577472][T28975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.610051][T27197] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.911159][T28998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 667.063110][T29007] loop2: detected capacity change from 0 to 512 [ 667.089436][T29007] EXT4-fs: Ignoring removed mblk_io_submit option [ 667.107269][T29007] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 667.127857][T29007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 667.139828][T29007] System zones: 1-12 [ 667.172628][T29007] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 667.189894][T29007] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 667.203098][T29007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.285646][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.169773][T29033] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 669.290417][T29102] syz-executor.0[29102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.290481][T29102] syz-executor.0[29102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.329195][T29105] loop1: detected capacity change from 0 to 1024 [ 669.356538][T29105] EXT4-fs: test_dummy_encryption option not supported [ 669.736992][ T9638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.798077][ T9638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.895986][ T9638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.960361][ T9638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.076460][ T9638] bridge_slave_1: left allmulticast mode [ 670.082153][ T9638] bridge_slave_1: left promiscuous mode [ 670.087883][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.110064][ T9638] bridge_slave_0: left allmulticast mode [ 670.115758][ T9638] bridge_slave_0: left promiscuous mode [ 670.121565][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.526117][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.537684][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.553666][ T9638] bond0 (unregistering): Released all slaves [ 670.639206][ T9638] tipc: Left network mode [ 670.765993][ T9638] hsr_slave_0: left promiscuous mode [ 670.780748][ T9638] hsr_slave_1: left promiscuous mode [ 670.786592][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.794219][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.802267][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.809744][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.820383][ T9638] veth1_macvtap: left promiscuous mode [ 670.825924][ T9638] veth0_macvtap: left promiscuous mode [ 670.831504][ T9638] veth1_vlan: left promiscuous mode [ 670.836771][ T9638] veth0_vlan: left promiscuous mode [ 670.956090][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 670.969255][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 671.004543][ T9638] team0 (unregistering): Port device batadv0 removed [ 671.082458][T29137] chnl_net:caif_netlink_parms(): no params data found [ 671.189380][T29137] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.196664][T29137] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.222115][T29137] bridge_slave_0: entered allmulticast mode [ 671.236961][T29137] bridge_slave_0: entered promiscuous mode [ 671.249290][T29137] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.256425][T29137] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.269114][T29137] bridge_slave_1: entered allmulticast mode [ 671.292119][T29137] bridge_slave_1: entered promiscuous mode [ 671.316913][T29137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.328168][T29137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.352583][T29137] team0: Port device team_slave_0 added [ 671.362752][T29137] team0: Port device team_slave_1 added [ 671.381057][T29137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.388093][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.414079][T29137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.428830][T29137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.435854][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.461973][T29137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.494874][T29137] hsr_slave_0: entered promiscuous mode [ 671.504195][T29137] hsr_slave_1: entered promiscuous mode [ 671.510248][T29137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.520018][T29137] Cannot create hsr debugfs directory [ 671.806812][T29137] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 671.826810][T29137] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 671.849907][T29137] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 671.878361][T29137] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 671.950017][T29137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.967296][T29137] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.980057][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.987200][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.013971][T29137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.024470][T29137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.040606][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.047718][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.156699][T29137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.343488][T29137] veth0_vlan: entered promiscuous mode [ 672.366650][T29137] veth1_vlan: entered promiscuous mode [ 672.400000][T29137] veth0_macvtap: entered promiscuous mode [ 672.420849][T29137] veth1_macvtap: entered promiscuous mode [ 672.449430][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.459969][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.469849][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.480316][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.490216][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.500676][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.510646][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.521098][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.532374][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.543405][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.553284][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.563751][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.573733][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.584309][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.594200][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.604728][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.617196][T29137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.629340][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.639998][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.650182][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.660747][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.670618][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.681060][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.690914][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.701374][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.711240][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.721746][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.732273][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.742749][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.752600][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.763438][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.773518][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.783954][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.818223][T29137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.833548][T29137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.842553][T29137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.851281][T29137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.860037][T29137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.942972][T29296] dvmrp1: entered allmulticast mode [ 677.713615][T29300] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 678.334331][T29315] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 678.780080][T29323] syzkaller0: entered promiscuous mode [ 678.786438][T29323] syzkaller0: entered allmulticast mode [ 680.048543][T29337] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.058279][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.079735][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 683.079753][ T29] audit: type=1400 audit(1718795675.715:39465): avc: denied { setattr } for pid=29364 comm="syz-executor.0" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 687.003982][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 688.695572][T28673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.745382][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.825461][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.972144][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.094802][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.108922][T29425] chnl_net:caif_netlink_parms(): no params data found [ 689.221094][ T11] bridge_slave_1: left allmulticast mode [ 689.226968][ T11] bridge_slave_1: left promiscuous mode [ 689.232738][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.254087][ T11] bridge_slave_0: left allmulticast mode [ 689.259770][ T11] bridge_slave_0: left promiscuous mode [ 689.265844][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.431706][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.442664][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.453177][ T11] bond0 (unregistering): Released all slaves [ 689.473696][T29425] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.480885][T29425] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.488383][T29425] bridge_slave_0: entered allmulticast mode [ 689.495089][T29425] bridge_slave_0: entered promiscuous mode [ 689.503108][T29446] pim6reg1: entered promiscuous mode [ 689.508529][T29446] pim6reg1: entered allmulticast mode [ 689.519002][T29425] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.526286][T29425] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.533842][T29425] bridge_slave_1: entered allmulticast mode [ 689.540789][T29425] bridge_slave_1: entered promiscuous mode [ 689.590041][T29425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.601924][ T11] hsr_slave_0: left promiscuous mode [ 689.607842][ T11] hsr_slave_1: left promiscuous mode [ 689.616056][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.623748][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.638882][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.646535][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.659232][ T11] veth1_macvtap: left promiscuous mode [ 689.665024][ T11] veth0_macvtap: left promiscuous mode [ 689.670704][ T11] veth1_vlan: left promiscuous mode [ 689.676204][ T11] veth0_vlan: left promiscuous mode [ 689.789694][ T11] team0 (unregistering): Port device team_slave_1 removed [ 689.807953][ T11] team0 (unregistering): Port device team_slave_0 removed [ 689.858441][T29425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.937486][T29425] team0: Port device team_slave_0 added [ 689.950447][T29425] team0: Port device team_slave_1 added [ 689.979523][T29425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.987435][T29425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.014636][T29425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.040614][T29425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.048771][T29425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.078557][T29425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.122097][T29425] hsr_slave_0: entered promiscuous mode [ 690.129835][T29425] hsr_slave_1: entered promiscuous mode [ 690.136102][T29425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.144083][T29425] Cannot create hsr debugfs directory [ 690.240165][ T29] audit: type=1326 audit(1718795682.314:39466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f1bcf29 code=0x7ffc0000 [ 690.265378][ T29] audit: type=1326 audit(1718795682.314:39467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f1bcf29 code=0x7ffc0000 [ 690.289685][ T29] audit: type=1326 audit(1718795682.314:39468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fef7f1bcf29 code=0x7ffc0000 [ 690.313949][ T29] audit: type=1326 audit(1718795682.314:39469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f1bcf29 code=0x7ffc0000 [ 690.338156][ T29] audit: type=1326 audit(1718795682.314:39470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7f1bcf29 code=0x7ffc0000 [ 690.395506][T29483] loop0: detected capacity change from 0 to 512 [ 690.407445][T29483] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 690.416968][T29483] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent [ 690.430133][T29482] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 690.441039][ T29] audit: type=1326 audit(1718795682.508:39471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29481 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff538210f29 code=0x0 [ 690.579329][T29425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 690.588438][T29425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 690.597664][T29425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 690.608209][T29425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 690.670858][T29486] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.681083][T29486] gretap0: entered promiscuous mode [ 690.833195][T29425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.853955][T29425] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.869059][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.876196][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.918289][T29425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.928947][T29425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.946396][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.953549][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.165334][T29425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.272806][T29425] veth0_vlan: entered promiscuous mode [ 691.282574][T29425] veth1_vlan: entered promiscuous mode [ 691.309057][T29425] veth0_macvtap: entered promiscuous mode [ 691.319120][T29425] veth1_macvtap: entered promiscuous mode [ 691.346590][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.357120][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.367182][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.377819][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.387820][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.398451][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.408740][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.419312][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.429339][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.439880][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.449912][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.460949][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.471212][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.478129][T29511] loop0: detected capacity change from 0 to 512 [ 691.482253][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.492264][T29511] EXT4-fs: Ignoring removed mblk_io_submit option [ 691.498529][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.506129][T29511] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 691.515678][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.531490][T29511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 691.541946][T29425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.543380][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.549789][T29511] System zones: [ 691.560148][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.560184][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.563711][T29511] 1-12 [ 691.573759][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.584426][T29511] [ 691.600310][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.610861][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.620900][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.631411][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.641349][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.651869][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.661872][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.672390][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.682245][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.692893][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.702770][T29425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.713240][T29425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.725048][T29511] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 691.726237][T29425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.742237][T29511] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 691.775203][T29511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.779641][T29425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.797095][T29425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.805969][T29425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.814893][T29425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.824844][T29137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.838033][T29517] loop2: detected capacity change from 0 to 1764 [ 691.958468][T29492] chnl_net:caif_netlink_parms(): no params data found [ 692.086472][T29492] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.093632][T29492] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.101960][T29492] bridge_slave_0: entered allmulticast mode [ 692.108852][T29492] bridge_slave_0: entered promiscuous mode [ 692.118128][T29492] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.125656][T29492] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.133770][T29492] bridge_slave_1: entered allmulticast mode [ 692.144348][T29492] bridge_slave_1: entered promiscuous mode [ 692.213209][T29492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.227068][T29492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.251707][T29546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 692.262529][T29492] team0: Port device team_slave_0 added [ 692.271960][T29492] team0: Port device team_slave_1 added [ 692.283135][ T29] audit: type=1326 audit(1718795684.207:39472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x0 [ 692.320718][T29492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.327737][T29492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.353931][T29492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.367302][T29492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.374664][T29492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.401833][T29492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.435900][T29492] hsr_slave_0: entered promiscuous mode [ 692.447849][T29492] hsr_slave_1: entered promiscuous mode [ 692.458468][T29492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.466337][T29492] Cannot create hsr debugfs directory [ 692.513107][T29555] loop2: detected capacity change from 0 to 512 [ 692.521219][T29555] EXT4-fs: Ignoring removed mblk_io_submit option [ 692.528407][T29555] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 692.538785][T29555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 692.547355][T29555] System zones: 1-12 [ 692.553674][T29555] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 692.570476][T29555] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 692.583654][T29555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.598284][T29492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.613645][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.655755][T29492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.731687][T29492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.821005][T29492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.909366][T29492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 692.918915][T29492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 692.928152][T29492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 692.937354][T29492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.956569][T29492] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.963717][T29492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.971079][T29492] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.978173][T29492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.999761][ T3178] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.008490][ T3178] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.051548][T29492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.073430][T29492] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.086924][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.094065][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.108337][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.115560][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.140565][T29492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.151331][T29492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.186908][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 693.238563][T29492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.418980][T29492] veth0_vlan: entered promiscuous mode [ 693.431466][T29492] veth1_vlan: entered promiscuous mode [ 693.451191][T29492] veth0_macvtap: entered promiscuous mode [ 693.460330][T29492] veth1_macvtap: entered promiscuous mode [ 693.474237][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.485716][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.495673][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.506440][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.517003][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.527752][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.538305][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.549724][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.560582][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.571088][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.581633][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.593357][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.603253][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.614425][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.624477][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.635425][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.645756][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.656329][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.669063][T29492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.680055][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.690641][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.701202][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.711772][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.721670][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.732845][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.742843][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.753474][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.763653][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.774342][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.784512][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.795210][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.805354][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.815921][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.825890][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.836550][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.846497][T29492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.856944][T29492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.876730][T29492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.893238][T29492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.902118][T29492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.910958][T29492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.919999][T29492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.076244][T29604] loop4: detected capacity change from 0 to 512 [ 694.084048][T29604] EXT4-fs: Ignoring removed mblk_io_submit option [ 694.091279][T29604] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 694.102109][T29604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 694.110738][T29604] System zones: 1-12 [ 694.115219][T29604] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 694.130323][T29604] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 694.143573][T29604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.170274][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.238364][T29614] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.251738][ T29] audit: type=1326 audit(1718795686.025:39473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ace5daf29 code=0x0 [ 694.521713][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88813ef09e00: rx timeout, send abort [ 694.530232][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88813ef1c000: rx timeout, send abort [ 694.538750][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88813ef09e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.553467][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88813ef1c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 694.587808][T29617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.648385][ T29] audit: type=1326 audit(1718795686.394:39474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29620 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 694.675398][ T29] audit: type=1326 audit(1718795686.394:39475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29620 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 694.902931][T29632] random: crng reseeded on system resumption [ 695.092910][T29638] loop2: detected capacity change from 0 to 512 [ 695.100844][T29638] EXT4-fs: Ignoring removed mblk_io_submit option [ 695.108147][T29638] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 695.118009][T29638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 695.128179][T29638] System zones: 1-12 [ 695.132659][T29638] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 695.155804][T29638] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 695.172413][T29638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.199888][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.275533][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.357619][T29658] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 695.452529][T29668] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.797821][T29672] loop3: detected capacity change from 0 to 512 [ 695.806112][T29672] EXT4-fs: Ignoring removed mblk_io_submit option [ 695.813944][T29672] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 695.823160][T29672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 695.831202][T29672] System zones: 1-12 [ 695.835458][T29672] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value size too large [ 695.852711][T29672] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 695.866260][T29672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.887808][T29425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.947821][T29675] loop3: detected capacity change from 0 to 1024 [ 695.958107][T29675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.981712][T29675] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 696.000418][T29425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.043791][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 696.043808][ T29] audit: type=1326 audit(1718795687.677:39488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 696.075268][ T29] audit: type=1326 audit(1718795687.677:39489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 696.099854][ T29] audit: type=1326 audit(1718795687.696:39490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25a940fca7 code=0x7ffc0000 [ 696.119373][T29680] dvmrp0: entered allmulticast mode [ 696.123961][ T29] audit: type=1326 audit(1718795687.696:39491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f25a940fc1c code=0x7ffc0000 [ 696.154434][ T29] audit: type=1326 audit(1718795687.696:39492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f25a940fb54 code=0x7ffc0000 [ 696.178730][ T29] audit: type=1326 audit(1718795687.696:39493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f25a940fb54 code=0x7ffc0000 [ 696.202929][ T29] audit: type=1326 audit(1718795687.696:39494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25a940ce1a code=0x7ffc0000 [ 696.228559][ T29] audit: type=1326 audit(1718795687.696:39495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 696.253082][ T29] audit: type=1326 audit(1718795687.696:39496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 696.277964][ T29] audit: type=1326 audit(1718795687.696:39497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29677 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25a940df29 code=0x7ffc0000 [ 696.375095][T29688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.403231][T29691] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 696.513946][T29707] loop2: detected capacity change from 0 to 512 [ 696.521776][T29707] EXT4-fs: Ignoring removed mblk_io_submit option [ 696.533860][T29707] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 696.557462][T29707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 696.566762][T29707] System zones: 1-12 [ 696.573855][T29707] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 696.590861][T29707] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 696.606550][T29718] random: crng reseeded on system resumption [ 696.618734][T29707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.680952][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.746151][T29729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 696.763304][T29730] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.840310][T29733] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.847701][T29733] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.530986][T29736] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 697.595628][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 697.627015][T29746] loop4: detected capacity change from 0 to 512 [ 697.640627][T29746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.653506][T29746] ext4 filesystem being mounted at /root/syzkaller-testdir1433838368/syzkaller.U7I4ZE/16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.711974][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.769446][T29759] loop4: detected capacity change from 0 to 512 [ 697.780823][T29759] EXT4-fs: Ignoring removed mblk_io_submit option [ 697.797307][T29759] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 697.807617][T29759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 697.819611][T29759] System zones: 1-12 [ 697.824453][T29759] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 697.841312][T29759] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 697.854478][T29759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.889076][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.949577][T29775] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 698.876920][T29804] loop2: detected capacity change from 0 to 512 [ 698.886134][T29804] EXT4-fs: Ignoring removed mblk_io_submit option [ 698.893114][T29804] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 698.903890][T29804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 698.914391][T29804] System zones: 1-12 [ 698.919084][T29804] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 698.938468][T29804] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 698.966491][T29804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.021886][T29810] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 699.038657][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.212058][T29822] loop4: detected capacity change from 0 to 8192 [ 699.856797][T29848] loop2: detected capacity change from 0 to 512 [ 699.864700][T29848] EXT4-fs: Ignoring removed mblk_io_submit option [ 699.872212][T29848] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 699.881633][T29848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 699.889794][T29848] System zones: 1-12 [ 699.895661][T29848] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 699.910831][T29848] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 699.923729][T29848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.956485][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.074147][T29852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=29852 comm=syz-executor.2 [ 700.088157][T29851] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 700.096632][T29851] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 700.276208][T29862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54346 sclass=netlink_route_socket pid=29862 comm=syz-executor.3 [ 700.321236][T29866] loop3: detected capacity change from 0 to 512 [ 700.339030][T29866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.370162][T29866] ext4 filesystem being mounted at /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.449733][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 700.483343][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 700.515755][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 700.542490][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 700.574498][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 700.601667][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 700.630239][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 700.658565][T29425] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 18: comm syz-executor.3: lblock 23 mapped to illegal pblock 18 (length 1) [ 700.675610][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 700.703408][T29425] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz-executor.3: path /root/syzkaller-testdir3291243443/syzkaller.iCJ1f8/41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 701.491138][T29889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=29889 comm=syz-executor.2 [ 701.512538][T29886] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 701.521072][T29886] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 701.540111][T29891] loop4: detected capacity change from 0 to 512 [ 701.552833][T29891] EXT4-fs: Ignoring removed mblk_io_submit option [ 701.567332][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 701.567347][ T29] audit: type=1326 audit(1718795692.781:39503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29892 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff538210f29 code=0x0 [ 701.600921][T29891] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 701.610331][T29891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 701.620581][T29891] System zones: 1-12 [ 701.625314][T29891] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 701.642035][T29891] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 701.662091][T29891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.705939][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.823226][ T29] audit: type=1326 audit(1718795693.021:39504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 701.886582][ T29] audit: type=1326 audit(1718795693.040:39505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 701.910750][ T29] audit: type=1326 audit(1718795693.040:39506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 701.935138][ T29] audit: type=1326 audit(1718795693.040:39507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 701.959703][ T29] audit: type=1326 audit(1718795693.040:39508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 701.983988][ T29] audit: type=1326 audit(1718795693.040:39509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 702.008181][ T29] audit: type=1326 audit(1718795693.040:39510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 702.032452][ T29] audit: type=1326 audit(1718795693.040:39511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 702.056668][ T29] audit: type=1326 audit(1718795693.040:39512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ace5daf29 code=0x7ffc0000 [ 702.097612][T29908] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.599395][T29925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=29925 comm=syz-executor.2 [ 702.615410][T29924] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 702.624139][T29924] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 702.813931][T29931] loop2: detected capacity change from 0 to 512 [ 702.840093][T29931] EXT4-fs: Ignoring removed mblk_io_submit option [ 702.847286][T29931] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 702.863009][T29931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 702.871503][T29931] System zones: 1-12 [ 702.875993][T29931] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 702.893597][T29931] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 702.908443][T29931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.945253][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.277675][T29952] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 703.311944][T29954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.425717][T29960] loop2: detected capacity change from 0 to 512 [ 703.434035][T29960] EXT4-fs: Ignoring removed mblk_io_submit option [ 703.443576][T29960] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 703.454197][T29960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 703.464251][T29960] System zones: 1-12 [ 703.490518][T29960] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 703.505379][T29960] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 703.520951][T29960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.563136][T28648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.250755][T29979] loop4: detected capacity change from 0 to 1764 [ 704.375787][T29425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.751071][T29994] syzkaller0: entered promiscuous mode [ 704.756831][T29994] syzkaller0: entered allmulticast mode [ 704.929522][T30009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 705.365544][T30013] loop3: detected capacity change from 0 to 1764 [ 705.854021][T30028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30028 comm=syz-executor.4 [ 705.985743][T30046] loop4: detected capacity change from 0 to 512 [ 705.994901][T30046] EXT4-fs: Ignoring removed mblk_io_submit option [ 706.004532][T30046] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 706.014652][T30046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 706.022869][T30046] System zones: 1-12 [ 706.029511][T30046] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 706.048135][T30049] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 706.057956][T30046] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 706.072539][T30046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.114414][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.168012][T30053] loop2: detected capacity change from 0 to 1764 [ 706.254029][T30058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=30058 comm=syz-executor.4 [ 706.268409][T30057] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 706.277502][T30057] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 706.383898][T30064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 706.665917][T30072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 706.752093][ T9638] bridge_slave_1: left allmulticast mode [ 706.758941][ T9638] bridge_slave_1: left promiscuous mode [ 706.767415][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.777039][T30076] loop3: detected capacity change from 0 to 8192 [ 706.783778][ T9638] bridge_slave_0: left allmulticast mode [ 706.789514][ T9638] bridge_slave_0: left promiscuous mode [ 706.795234][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.804974][T30076] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 706.916024][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.928982][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.940123][ T9638] bond0 (unregistering): Released all slaves [ 707.046419][ T9638] hsr_slave_0: left promiscuous mode [ 707.052432][ T9638] hsr_slave_1: left promiscuous mode [ 707.058591][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.066565][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.084491][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.092252][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.104916][ T9638] veth1_macvtap: left promiscuous mode [ 707.110832][ T9638] veth0_macvtap: left promiscuous mode [ 707.116486][ T9638] veth1_vlan: left promiscuous mode [ 707.121829][ T9638] veth0_vlan: left promiscuous mode [ 707.245258][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 707.257708][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 707.311610][T30082] loop4: detected capacity change from 0 to 512 [ 707.331602][T30082] EXT4-fs: Ignoring removed mblk_io_submit option [ 707.338510][T30082] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 707.350734][T30082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 707.358862][T30082] System zones: 1-12 [ 707.363482][T30082] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 707.379426][T30082] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 707.392476][T30082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.424724][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.475931][T30090] loop4: detected capacity change from 0 to 512 [ 707.484177][T30090] EXT4-fs: Ignoring removed mblk_io_submit option [ 707.491436][T30090] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 707.506411][T30090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 707.515737][T30090] System zones: 1-12 [ 707.520529][T30090] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 707.537128][T30090] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 707.551115][T30090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.588794][T29492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.702466][T30098] ================================================================== [ 707.710959][T30098] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 707.718013][T30098] [ 707.720374][T30098] read-write to 0xffff888111915914 of 4 bytes by task 30099 on cpu 1: [ 707.728712][T30098] tty_set_termios+0x1a2/0x8b0 [ 707.733489][T30098] set_termios+0x365/0x4e0 [ 707.737927][T30098] tty_mode_ioctl+0x391/0x5d0 [ 707.742626][T30098] n_tty_ioctl_helper+0x8d/0x240 [ 707.747636][T30098] n_tty_ioctl+0xfd/0x200 [ 707.751995][T30098] tty_ioctl+0x886/0xbe0 [ 707.756255][T30098] __se_sys_ioctl+0xd3/0x150 [ 707.760979][T30098] __x64_sys_ioctl+0x43/0x50 [ 707.765721][T30098] x64_sys_call+0x1581/0x2d70 [ 707.770614][T30098] do_syscall_64+0xc9/0x1c0 [ 707.775134][T30098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.781221][T30098] [ 707.783547][T30098] read to 0xffff888111915914 of 4 bytes by task 30098 on cpu 0: [ 707.791536][T30098] n_tty_write+0xa0/0xb90 [ 707.795974][T30098] file_tty_write+0x386/0x690 [ 707.801188][T30098] tty_write+0x28/0x30 [ 707.805268][T30098] vfs_write+0x78f/0x900 [ 707.809638][T30098] ksys_write+0xeb/0x1b0 [ 707.813934][T30098] __x64_sys_write+0x42/0x50 [ 707.818569][T30098] x64_sys_call+0x27ef/0x2d70 [ 707.823274][T30098] do_syscall_64+0xc9/0x1c0 [ 707.827808][T30098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.833896][T30098] [ 707.836243][T30098] value changed: 0x00008a3b -> 0x0000001f [ 707.842060][T30098] [ 707.844393][T30098] Reported by Kernel Concurrency Sanitizer on: 2024/06/19 11:14:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 707.850718][T30098] CPU: 0 PID: 30098 Comm: syz-executor.4 Tainted: G W 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 [ 707.862793][T30098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 707.873101][T30098] ================================================================== [ 707.895323][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 707.895340][ T29] audit: type=1400 audit(1718795698.605:39518): avc: denied { write } for pid=3075 comm="syz-fuzzer" path="pipe:[718]" dev="pipefs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.1.69 closed by remote host.