last executing test programs: 17.736591359s ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500ac141400000000000000000000000000000000003c00"/180], 0xfc}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000005140), 0x0, 0x4008810) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4}, 0x48) write$binfmt_misc(r8, &(0x7f00000001c0)=ANY=[], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000047060100000000000024badc57353700000006000000000000000800"], 0x20}}, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000040)={0x8001, "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"}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f0000000000)) 17.630705776s ago: executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x4, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001940)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000080)=0x40, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00', r8}, 0x10) prctl$PR_SET_THP_DISABLE(0x35, 0x0) socket(0x28, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) 16.508730688s ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500ac141400000000000000000000000000000000003c00"/180], 0xfc}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000005140), 0x0, 0x4008810) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4}, 0x48) write$binfmt_misc(r8, &(0x7f00000001c0)=ANY=[], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000047060100000000000024badc57353700000006000000000000000800"], 0x20}}, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000040)={0x8001, "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"}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f0000000000)) 16.353077032s ago: executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4a6, &(0x7f0000000580)="$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") r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0xffffffffffffff1b}]}]}, 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6}, 0xfffffffffffffdd9) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000040), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000150000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000d00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x24}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x20b6d0db6eac6723}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r9, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000180)={'syzkaller0\x00'}) 16.111000049s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000e39ea5c80566610d270000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x13, 0x1, 0x8, @mcast2, @remote, 0x10, 0x7821, 0x2, 0x80}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0x6, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000004c0)="2700000014000707030e0000120f0a0011000100fe601c8d14afa7841610817233b021f4246d67", 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 16.04388135s ago: executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$ARCH_SET_GS(0x1e, r1, 0x0, 0x1003) 3.510259279s ago: executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000002440)={'#! ', '', [], 0xa, '\\'}, 0x5) getrandom(&(0x7f0000006080)=""/324, 0xfffffffffffffea8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socketpair(0x2c, 0x800, 0x7, &(0x7f0000000040)) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x40000}], 0x1, 0x7800, 0x0, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket(0x1e, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x44) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000100)='GPL\x00', 0xa}, 0x90) 3.339327436s ago: executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") 3.272236286s ago: executing program 3: r0 = memfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffffffff00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9}}}]}}]}, 0x45c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.215211925s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./file0\x00', r1, 0x0, 0x0) 3.171284731s ago: executing program 3: msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0x0, 0x542) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) statx(r2, &(0x7f0000000300)='./file0\x00', 0x400, 0x7bf, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) r8 = gettid() process_vm_writev(r8, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x0, r1, r4, r5, r6, 0x162, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x67c, 0x3, 0x9, 0x2, 0x81, 0x6, 0x9, r7, r8}) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000009193"], 0x8, 0x0) 2.250258164s ago: executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14, 0x1800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000840)='veth1\x00', 0x10) connect$tipc(r0, &(0x7f0000000340)=@name, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000880)=@newnexthop={0x68, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GROUP={0x4c, 0x2, [{0x2, 0x3}, {0x2}, {0x2, 0x3}, {0x2, 0x40}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x8}]}]}, 0x68}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ptrace$getenv(0xf, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffe47, &(0x7f00000006c0)={&(0x7f0000000680)=@can_delroute={0x1c, 0x19, 0x21, 0x0, 0x25dfdbfd, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1080) pwritev(r7, &(0x7f0000000740)=[{&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="11ef1bcc62ce948118e16d9d30ada9b7a4a205b4299a995ba90054c9c7366b7ad711ced67cc2f4ad", 0x28}, {&(0x7f0000000380)="2f1a9f84f4ec2248d1fbbcd874bfb465cd3f52cf51e81004869bb33af7d57c27cc4de8863ab92dd43877bdecc52bb1c6141996d5845fb57f5fff63c2c454466fe30649b489b5747a3df74eb6284d3f2d941b05a72ea5160331b818ca318e1e8bfa27dbccfe75549df275ab7036941f8f23e8b88c559da1231d566e538a04c564b7ee28573fc0479391dd46eaa2604c8bdd8acd4c95dbb6f1f6969a84b96dc99922eb9327d4ec179919d5ffd9b7c20f5ac8c86dce750975fbb21ced58447d73c70fdea363760f1e20eae9018aadc5a8f6bb91a2abb2ab901e62d890274f28043a8217bdee3f0420a33409511ef2c83ea8e4b4", 0xf2}, {&(0x7f00000004c0)="a1fce41e1790bf75f423b99b19774dd013cf348f3c874591a2368a6da28d74220a0d76417204a5b562fbc07942e096d23cfe0b90b77a71b53416fd046848e55bcff64e193dcbf18a2eecbf2ca58cd428392cab6e840cc87d6f1c105aa38306722827c67b64631b89c8c90d894503a126289a3f325cb9c0f3303a52f192fc0c2c167db8510c1bf3266909f22d6329326040b1c252135e39cf150ae18c87e587322d977cdeda07753c189e167ad1", 0xad}, {&(0x7f0000000580)="bd4403311bf27dd0dd9d2ec35a703b7156629ceb17eafaa92f4adafd9be36d0e55706c8fe056a3c3274da944c9335ba80e13b67f3b9b6d2abcd6b56e0110be78c6b069e162e36c6dcd69412c630b56cd06201fc1a9e62c03dabd756d408dc61db20007ddb6ca50d041a483ac6df62a9208467a596875001617fc609638a8d49d5ae845b0e212a889ae967b33bc8609a8c158ca6d5f4c", 0x96}, {&(0x7f0000000900)="4cdb15558a372c20dbe596b0966f57079fd91836c65aeab52f0ff9e01ed72f1e0cc439ad9216c011c2b6d6228d1585ede7d63c6f3da7a8d4742c9130c37b463332807906badec075bc49e5240cee6897569f266eb0c5f355119687208ec8bf6dc2b528390ab0798dc3fe34e1a7898b04986d20721bf0a2a594c6263ecd7647b3403c4ea6992fb8a7007be79cda37678b2cc08adf43e5a0", 0x97}], 0x6, 0x7972, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r8 = io_uring_setup(0x30d3, &(0x7f00000000c0)) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000080), 0xc) read(r9, &(0x7f0000000180)=""/52, 0xfffffdef) close_range(r8, 0xffffffffffffffff, 0x0) 2.096212927s ago: executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0x0, 0x0, 0x0, 0x91c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r3, 0x1, 0x700, 0xc337, 0x8001, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@noop, @generic={0x88, 0x7, "6834e236ce"}, @rr={0x7, 0xf, 0x1b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x11, "80b806164d9b9258f7c80cd80428ce"}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=3']) 2.008746691s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 1.990560763s ago: executing program 2: socket(0x28, 0x3, 0x9aae) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbd"], 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") bind$unix(r2, &(0x7f0000000400)=@abs={0x1}, 0x6e) pread64(r1, &(0x7f0000000480)=""/176, 0xb0, 0xe2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) read$char_usb(r3, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f4fc73fb0af724f23f50cde55baafc3e797509"}) r6 = syz_open_pts(r0, 0x0) r7 = dup3(r6, r0, 0x0) read$watch_queue(r7, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000004c0)={0x4, 0x7fffffff, 0x133, 0x0, 0x7}) write$P9_RWALK(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="3049b58f0bd085332a9a31ee207f0348326829435ec7740000006f0200030010030000200500000000000000020100010006000001000000988e70dbcd084972aba56b3bbe2b3d9301e80c17674bf0b0484753f3dd19e08541fff41d05f1c7687bbe4846de1ef236c554b93f292704912ef63ca265c84d2a92aed4910db810b63a17942e40b5ca99aaf0d613b336163c817430f02d227c513f767e"], 0x30) mlockall(0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 1.487370081s ago: executing program 1: socket(0x28, 0x3, 0x9aae) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbd"], 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") bind$unix(r2, &(0x7f0000000400)=@abs={0x1}, 0x6e) pread64(r1, &(0x7f0000000480)=""/176, 0xb0, 0xe2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) read$char_usb(r3, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f4fc73fb0af724f23f50cde55baafc3e797509"}) r6 = syz_open_pts(r0, 0x0) r7 = dup3(r6, r0, 0x0) read$watch_queue(r7, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000004c0)={0x4, 0x7fffffff, 0x133, 0x0, 0x7}) write$P9_RWALK(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="3049b58f0bd085332a9a31ee207f0348326829435ec7740000006f0200030010030000200500000000000000020100010006000001000000988e70dbcd084972aba56b3bbe2b3d9301e80c17674bf0b0484753f3dd19e08541fff41d05f1c7687bbe4846de1ef236c554b93f292704912ef63ca265c84d2a92aed4910db810b63a17942e40b5ca99aaf0d613b336163c817430f02d227c513f767e"], 0x30) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 1.292123321s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 1.266231784s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x0, 0x38}, "8385d5f985270c08", "ff0000000000000000000600", '\x00', "d656898a4c9ae4cd"}, 0x28) getsockopt$inet6_opts(r0, 0x11a, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) 1.238793759s ago: executing program 1: r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x402) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = io_uring_setup(0x2edd, &(0x7f0000000040)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x4, 0x20000028, r3) syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x402) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) io_uring_setup(0x2edd, &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x4, 0x20000028, r3) (async) 1.23133861s ago: executing program 2: r0 = socket(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x2001c00) 1.218574562s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b87781d0048007ea60864160af36505001a0038001d00880c00009ee517d34460bc06000000a705251ef01fe4cd08f2f79d825c940b04a8949a3651f60a8496d9984a3728b7504a83f428", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.203425145s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_remove_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 1.078752664s ago: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000380), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x1e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, "819564f676ce142862f102d7067abb87d20b25"}) 1.055592868s ago: executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.04128236s ago: executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x4, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001940)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000080)=0x40, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) listen(0xffffffffffffffff, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) 1.018938293s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@delalloc}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x5, 0xf000) 896.687461ms ago: executing program 1: socket(0x28, 0x3, 0x9aae) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbd"], 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") bind$unix(r2, &(0x7f0000000400)=@abs={0x1}, 0x6e) pread64(r1, &(0x7f0000000480)=""/176, 0xb0, 0xe2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) read$char_usb(r3, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f4fc73fb0af724f23f50cde55baafc3e797509"}) r6 = syz_open_pts(r0, 0x0) r7 = dup3(r6, r0, 0x0) read$watch_queue(r7, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000004c0)={0x4, 0x7fffffff, 0x133, 0x0, 0x7}) write$P9_RWALK(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="3049b58f0bd085332a9a31ee207f0348326829435ec7740000006f0200030010030000200500000000000000020100010006000001000000988e70dbcd084972aba56b3bbe2b3d9301e80c17674bf0b0484753f3dd19e08541fff41d05f1c7687bbe4846de1ef236c554b93f292704912ef63ca265c84d2a92aed4910db810b63a17942e40b5ca99aaf0d613b336163c817430f02d227c513f767e"], 0x30) mlockall(0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 315.398322ms ago: executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_buf(r1, 0x6, 0x2, &(0x7f0000000200)='GYo5', 0x4) ioctl$TUNGETIFF(r0, 0x400454cc, 0x0) 56.542611ms ago: executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 0s ago: executing program 0: socket(0x28, 0x3, 0x9aae) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbd"], 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") bind$unix(r2, &(0x7f0000000400)=@abs={0x1}, 0x6e) pread64(r1, &(0x7f0000000480)=""/176, 0xb0, 0xe2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) read$char_usb(r3, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f4fc73fb0af724f23f50cde55baafc3e797509"}) r6 = syz_open_pts(r0, 0x0) r7 = dup3(r6, r0, 0x0) read$watch_queue(r7, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000004c0)={0x4, 0x7fffffff, 0x133, 0x0, 0x7}) write$P9_RWALK(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="3049b58f0bd085332a9a31ee207f0348326829435ec7740000006f0200030010030000200500000000000000020100010006000001000000988e70dbcd084972aba56b3bbe2b3d9301e80c17674bf0b0484753f3dd19e08541fff41d05f1c7687bbe4846de1ef236c554b93f292704912ef63ca265c84d2a92aed4910db810b63a17942e40b5ca99aaf0d613b336163c817430f02d227c513f767e"], 0x30) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 998.999723][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.009733][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.020318][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.030792][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.041234][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.051131][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.062197][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.072035][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.082516][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.093026][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.103549][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.113429][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.124509][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.134409][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.144834][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.155394][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.165824][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.175630][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.186093][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.196690][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.207123][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.216988][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.228092][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.237922][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.248406][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.258852][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.269278][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.285283][T16761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.293772][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.304338][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.314230][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.325306][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.335136][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.345561][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.356116][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.366651][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.376483][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.387555][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.397512][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.407935][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.418441][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.428863][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.438683][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.449935][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.459962][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.470457][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.480872][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.491299][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.501150][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.512207][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.522084][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.532693][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.542607][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.553739][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.563575][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.574006][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.583818][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.594900][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.604758][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.615184][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.625714][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.636142][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.645968][T16761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.656989][T16761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.672334][T16761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.694970][T16761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.703728][T16761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.712545][T16761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.721910][T16761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.856730][T16986] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 999.946773][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 999.956199][T16986] veth0_to_team: entered promiscuous mode [ 999.961984][T16986] veth0_to_team: entered allmulticast mode [ 999.978849][T16998] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1000.087243][T17006] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1000.106127][T17006] bond1: entered promiscuous mode [ 1000.151072][T17006] bond1: (slave ip6gretap1): making interface the new active one [ 1000.159522][T17006] ip6gretap1: entered promiscuous mode [ 1000.186873][T17006] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1000.222766][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1000.283677][T17009] bond1: entered allmulticast mode [ 1000.288938][T17009] ip6gretap1: entered allmulticast mode [ 1000.308720][T17009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.852758][T17041] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1000.878344][T17041] bond4: entered promiscuous mode [ 1000.944485][T17041] bond4: (slave ip6gretap2): making interface the new active one [ 1000.952300][T17041] ip6gretap2: entered promiscuous mode [ 1001.015864][T17041] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1001.071816][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1001.090336][T17053] bond4: entered allmulticast mode [ 1001.095512][T17053] ip6gretap2: entered allmulticast mode [ 1001.125096][T17053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1001.308169][T17072] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1001.401872][T17076] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1001.423055][T17078] loop0: detected capacity change from 0 to 512 [ 1001.426654][T17074] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1001.456454][T17083] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1001.463428][T17074] team0: Device ipvlan2 failed to register rx_handler [ 1001.493853][T17078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.541309][T17078] ext4 filesystem being mounted at /root/syzkaller-testdir3895712193/syzkaller.3j2Jbw/203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.568473][T17078] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1001.587516][T17078] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1001.599666][T17078] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1001.619086][T17078] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1001.677875][ T3181] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1001.688380][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.701578][ T3181] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1001.786871][T17114] SET target dimension over the limit! [ 1001.855925][T17120] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1001.923132][ T29] audit: type=1326 audit(2000000376.854:49979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17126 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2251ecee9 code=0x0 [ 1002.223685][T17161] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1002.325846][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1002.400855][ T29] audit: type=1326 audit(2000000377.299:49980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.486710][ T29] audit: type=1326 audit(2000000377.326:49981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.511494][ T29] audit: type=1326 audit(2000000377.326:49982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.535676][ T29] audit: type=1326 audit(2000000377.326:49983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.560694][ T29] audit: type=1326 audit(2000000377.326:49984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.584890][ T29] audit: type=1326 audit(2000000377.326:49985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.609758][ T29] audit: type=1326 audit(2000000377.326:49986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17169 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4955664ee9 code=0x7ffc0000 [ 1002.667444][T17182] loop0: detected capacity change from 0 to 2048 [ 1002.770665][T17182] loop0: unable to read partition table [ 1002.776444][T17182] loop0: partition table beyond EOD, truncated [ 1002.782679][T17182] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1003.028162][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1003.062977][T17205] bond1: entered promiscuous mode [ 1003.076121][T17205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.135754][T17218] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1003.254406][T17226] sock: sock_timestamping_bind_phc: sock not bind to device [ 1003.259008][T17228] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1003.490805][T17254] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1003.528950][T17256] loop0: detected capacity change from 0 to 512 [ 1003.551315][T17256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.577939][T17256] ext4 filesystem being mounted at /root/syzkaller-testdir3895712193/syzkaller.3j2Jbw/221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.649225][T17265] validate_nla: 2 callbacks suppressed [ 1003.649238][T17265] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1003.683984][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.777465][T17269] hsr0 speed is unknown, defaulting to 1000 [ 1003.869862][T17282] tipc: Started in network mode [ 1003.874796][T17282] tipc: Node identity f0, cluster identity 4711 [ 1003.881641][T17282] tipc: Node number set to 240 [ 1004.087204][T17291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1004.168080][T17299] dccp_invalid_packet: P.Data Offset(4) too small [ 1004.198716][T17303] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1004.220647][T17301] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.237573][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1004.237587][ T29] audit: type=1326 audit(2000000379.004:50004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2251ecee9 code=0x7fc00000 [ 1004.554639][T17325] loop0: detected capacity change from 0 to 512 [ 1004.586864][T17325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1004.645623][T17325] ext4 filesystem being mounted at /root/syzkaller-testdir3895712193/syzkaller.3j2Jbw/230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.702135][T17331] hsr0 speed is unknown, defaulting to 1000 [ 1004.728969][T17325] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1004.767976][T17325] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1004.815730][T17325] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1004.840257][T17325] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1004.877316][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.930157][ T29] audit: type=1400 audit(2000000379.643:50005): avc: denied { connect } for pid=17342 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1005.005833][T17347] loop0: detected capacity change from 0 to 512 [ 1005.044615][T17347] EXT4-fs: quotafile must be on filesystem root [ 1005.068197][ T29] audit: type=1326 audit(2000000379.773:50006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2251ea667 code=0x7fc00000 [ 1005.342140][T17374] loop0: detected capacity change from 0 to 2048 [ 1005.480031][T17382] __nla_validate_parse: 1 callbacks suppressed [ 1005.480061][T17382] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1005.531712][T17374] loop0: unable to read partition table [ 1005.544741][T17374] loop0: partition table beyond EOD, truncated [ 1005.550916][T17374] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1005.781840][T17411] loop0: detected capacity change from 0 to 512 [ 1005.966167][T17431] loop0: detected capacity change from 0 to 512 [ 1005.991828][ T29] audit: type=1400 audit(2000000380.625:50007): avc: denied { module_load } for pid=17418 comm="syz-executor.2" path=2F6D656D66643A2CEA202864656C6574656429 dev="tmpfs" ino=3477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1006.076689][T17431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.167356][T17431] ext4 filesystem being mounted at /root/syzkaller-testdir3895712193/syzkaller.3j2Jbw/239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.202298][T17432] Invalid ELF header magic: != ELF [ 1006.283018][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.427175][T17451] loop0: detected capacity change from 0 to 512 [ 1006.464378][T17451] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1006.547473][T17458] xt_ecn: cannot match TCP bits for non-tcp packets [ 1006.572224][T17458] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1006.604744][ T910] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1006.612239][ T910] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1006.623819][T17461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1006.633788][T17461] openvswitch: netlink: Flow key attr not present in new flow. [ 1006.634351][ T910] hid-generic 0000:0000:0000.0034: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1007.221789][T17501] loop1: detected capacity change from 0 to 512 [ 1007.246579][ T7329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.318229][ T7329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.351848][T17495] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1007.441376][ T7329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.481899][T17500] hsr0 speed is unknown, defaulting to 1000 [ 1007.521192][ T8207] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1007.542802][ T8207] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1007.559022][ T7329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.605004][T17534] netlink: del zone limit has 8 unknown bytes [ 1007.625743][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1007.668385][T17539] vlan2: entered promiscuous mode [ 1007.673469][T17539] macvtap0: entered promiscuous mode [ 1007.678889][T17539] vlan2: entered allmulticast mode [ 1007.684095][T17539] macvtap0: entered allmulticast mode [ 1007.689463][T17539] veth0_macvtap: entered allmulticast mode [ 1007.721182][T17539] macvtap0: left allmulticast mode [ 1007.726344][T17539] veth0_macvtap: left allmulticast mode [ 1007.731884][T17539] macvtap0: left promiscuous mode [ 1007.780700][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1007.882724][ T7329] bridge_slave_1: left allmulticast mode [ 1007.888464][ T7329] bridge_slave_1: left promiscuous mode [ 1007.894178][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.913668][T17546] loop1: detected capacity change from 0 to 512 [ 1007.929507][ T7329] bridge_slave_0: left allmulticast mode [ 1007.935233][ T7329] bridge_slave_0: left promiscuous mode [ 1007.940986][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.180133][ T7329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.200889][ T7329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.220482][ T7329] bond0 (unregistering): Released all slaves [ 1008.243231][ T7329] bond1 (unregistering): Released all slaves [ 1008.389995][T17500] chnl_net:caif_netlink_parms(): no params data found [ 1008.518708][T17566] loop1: detected capacity change from 0 to 4096 [ 1008.530249][ T7329] hsr_slave_0: left promiscuous mode [ 1008.547069][ T7329] hsr_slave_1: left promiscuous mode [ 1008.548098][T17566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.584625][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.592099][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.625102][T17567] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 1008.634895][ T29] audit: type=1400 audit(2000000383.071:50008): avc: denied { relabelto } for pid=17565 comm="syz-executor.1" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 1008.662544][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.670228][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.707651][ T7329] veth1_macvtap: left promiscuous mode [ 1008.713209][ T7329] veth0_macvtap: left promiscuous mode [ 1008.718762][ T7329] veth1_vlan: left promiscuous mode [ 1008.723976][ T7329] veth0_vlan: left promiscuous mode [ 1008.741270][T17566] tmpfs: Bad value for 'mpol' [ 1008.748328][ T29] audit: type=1400 audit(2000000383.164:50009): avc: denied { setattr } for pid=17565 comm="syz-executor.1" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 1008.775706][ T29] audit: type=1400 audit(2000000383.173:50010): avc: denied { prog_load } for pid=17565 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.795369][ T29] audit: type=1400 audit(2000000383.173:50011): avc: denied { prog_run } for pid=17565 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.815640][ T29] audit: type=1400 audit(2000000383.173:50012): avc: denied { map_create } for pid=17565 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.835370][ T29] audit: type=1400 audit(2000000383.173:50013): avc: denied { map_read map_write } for pid=17565 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.858063][T17584] dccp_close: ABORT with 32 bytes unread [ 1008.922662][T16761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.129054][ T7329] team0 (unregistering): Port device team_slave_1 removed [ 1009.158212][ T7329] team0 (unregistering): Port device team_slave_0 removed [ 1009.252555][T17606] loop1: detected capacity change from 0 to 2048 [ 1009.323528][T17500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.330638][T17500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.368288][T17500] bridge_slave_0: entered allmulticast mode [ 1009.376729][T17500] bridge_slave_0: entered promiscuous mode [ 1009.402625][T17500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.409804][T17500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.428934][T17500] bridge_slave_1: entered allmulticast mode [ 1009.443413][T17606] loop1: unable to read partition table [ 1009.449335][T17500] bridge_slave_1: entered promiscuous mode [ 1009.457394][T17606] loop1: partition table beyond EOD, truncated [ 1009.464460][T17606] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1009.516480][T17500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.552220][T17500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.618709][T17500] team0: Port device team_slave_0 added [ 1009.638444][T17500] team0: Port device team_slave_1 added [ 1009.683798][T17500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.690859][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.694386][T17624] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1009.716724][T17500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.796506][T17500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.803675][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.829751][T17500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.949008][T17500] hsr_slave_0: entered promiscuous mode [ 1009.974067][T17636] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1009.976612][T17634] loop1: detected capacity change from 0 to 1764 [ 1009.990283][T17500] hsr_slave_1: entered promiscuous mode [ 1010.011768][T17500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.019397][T17500] Cannot create hsr debugfs directory [ 1010.189374][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1010.326838][T17668] 9pnet_fd: Insufficient options for proto=fd [ 1010.366808][T17668] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 1010.375023][T17668] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1010.411267][T17668] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1010.419442][T17668] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1010.455447][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1010.481236][T17668] netlink: 'syz-executor.3': attribute type 43 has an invalid length. [ 1010.527980][T17500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1010.565125][T17500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1010.607436][T17500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1010.640942][T17500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1010.825266][T17500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.877075][T17500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.934542][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.941659][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.006337][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.013484][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.187262][T17500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.414668][T17500] veth0_vlan: entered promiscuous mode [ 1011.470347][T17500] veth1_vlan: entered promiscuous mode [ 1011.500299][T17500] veth0_macvtap: entered promiscuous mode [ 1011.529539][T17500] veth1_macvtap: entered promiscuous mode [ 1011.562710][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.573251][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.583078][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.593562][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.603439][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.613933][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.623879][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.634350][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.644167][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.654659][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.664547][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.674975][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.684774][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.695204][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.705090][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.715629][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.725479][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.736089][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.745989][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.756768][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.766597][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.777098][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.786957][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.797893][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.807736][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.818184][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.828021][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.838518][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.848352][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.858841][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.868672][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.879307][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.889563][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.900251][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.910070][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.920662][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.935299][T17500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.947120][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.957586][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.967560][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.978135][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.987960][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.998424][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.008226][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.018649][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.028457][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.038926][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.048813][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.059292][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.069192][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.079639][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.089452][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.099873][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.109691][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.120163][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.130020][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.140588][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.150454][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.160868][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.170756][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.181212][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.191097][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.201505][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.211320][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.221750][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.231923][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.242349][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.252190][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.262609][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.272429][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.282915][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.292847][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.305405][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.406637][T17500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.448467][T17500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.457299][T17500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.466021][T17500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.474800][T17500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.666307][T17756] __nla_validate_parse: 2 callbacks suppressed [ 1012.666345][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1012.800633][T17766] sctp: [Deprecated]: syz-executor.0 (pid 17766) Use of int in max_burst socket option deprecated. [ 1012.800633][T17766] Use struct sctp_assoc_value instead [ 1012.914282][T17775] loop1: detected capacity change from 0 to 512 [ 1012.955384][T17775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.003374][T17775] ext4 filesystem being mounted at /root/syzkaller-testdir3033871176/syzkaller.y3Aapp/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.085982][T17779] hsr0 speed is unknown, defaulting to 1000 [ 1013.160632][T16761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.463089][T17787] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1013.661512][T17794] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1013.763479][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1013.847501][T17803] loop0: detected capacity change from 0 to 512 [ 1013.853567][T17806] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1013.917157][T17803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.942009][T17803] ext4 filesystem being mounted at /root/syzkaller-testdir3895712193/syzkaller.3j2Jbw/274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.027033][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.225617][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1014.294249][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1014.294278][ T29] audit: type=1400 audit(2000000388.313:50015): avc: denied { write } for pid=17838 comm="syz-executor.0" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1014.406829][T17841] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1014.442309][T17851] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1014.528274][T17858] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1014.561386][T17856] loop1: detected capacity change from 0 to 512 [ 1014.582330][ T910] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1014.593842][ T910] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1014.603859][T17856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.633178][T17856] ext4 filesystem being mounted at /root/syzkaller-testdir3033871176/syzkaller.y3Aapp/50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.773459][T16761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.911756][T17869] hsr0 speed is unknown, defaulting to 1000 [ 1014.919278][T17879] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1014.950804][ T5351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.007414][ T29] audit: type=1400 audit(2000000388.971:50016): avc: denied { shutdown } for pid=17883 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1015.037220][ T5351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.112291][ T5351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.143335][T17869] chnl_net:caif_netlink_parms(): no params data found [ 1015.189472][ T5351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.326154][ T29] audit: type=1400 audit(2000000389.276:50017): avc: denied { write } for pid=17885 comm="syz-executor.1" path="socket:[224497]" dev="sockfs" ino=224497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1015.385855][T17869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.393120][T17869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.447842][T17869] bridge_slave_0: entered allmulticast mode [ 1015.472721][T17869] bridge_slave_0: entered promiscuous mode [ 1015.479235][T17894] sctp: [Deprecated]: syz-executor.1 (pid 17894) Use of int in max_burst socket option deprecated. [ 1015.479235][T17894] Use struct sctp_assoc_value instead [ 1015.508164][T17869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.515337][T17869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.552728][T17869] bridge_slave_1: entered allmulticast mode [ 1015.569632][T17869] bridge_slave_1: entered promiscuous mode [ 1015.588697][ T5351] bridge_slave_1: left allmulticast mode [ 1015.594410][ T5351] bridge_slave_1: left promiscuous mode [ 1015.600015][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.625886][ T5351] bridge_slave_0: left allmulticast mode [ 1015.631652][ T5351] bridge_slave_0: left promiscuous mode [ 1015.637291][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.745646][ T5351] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1015.754010][ T5351] ip6gretap1 (unregistering): left promiscuous mode [ 1015.760850][ T5351] ip6gretap1 (unregistering): left allmulticast mode [ 1015.793589][ T29] audit: type=1326 audit(2000000389.702:50018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f0a67d4c667 code=0x0 [ 1015.945035][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.960499][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.974727][ T5351] bond0 (unregistering): Released all slaves [ 1016.008270][ T5351] bond1 (unregistering): Released all slaves [ 1016.022349][T17896] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1016.069417][T17924] vlan2: entered promiscuous mode [ 1016.074611][T17924] macvtap0: entered promiscuous mode [ 1016.079994][T17924] vlan2: entered allmulticast mode [ 1016.085098][T17924] macvtap0: entered allmulticast mode [ 1016.090546][T17924] veth0_macvtap: entered allmulticast mode [ 1016.104457][T17924] team0: Device vlan2 is up. Set it down before adding it as a team port [ 1016.152861][T17924] macvtap0: left allmulticast mode [ 1016.158139][T17924] veth0_macvtap: left allmulticast mode [ 1016.163683][T17924] macvtap0: left promiscuous mode [ 1016.221824][T17869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.233305][T17918] hsr0 speed is unknown, defaulting to 1000 [ 1016.286743][ T5351] tipc: Left network mode [ 1016.293407][T17869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.314926][T17869] team0: Port device team_slave_0 added [ 1016.329687][T17869] team0: Port device team_slave_1 added [ 1016.364430][T17869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.371413][T17869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.397384][T17869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.420596][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1016.434248][ T5351] hsr_slave_0: left promiscuous mode [ 1016.441135][ T5351] hsr_slave_1: left promiscuous mode [ 1016.447122][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.454586][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.467075][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.474707][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.485478][ T5351] veth1_macvtap: left promiscuous mode [ 1016.491166][ T5351] veth0_macvtap: left promiscuous mode [ 1016.497077][ T5351] veth1_vlan: left promiscuous mode [ 1016.502353][ T5351] veth0_vlan: left promiscuous mode [ 1016.661867][ T5351] team0 (unregistering): Port device team_slave_1 removed [ 1016.682472][ T5351] team0 (unregistering): Port device team_slave_0 removed [ 1016.776904][T17869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.783914][T17869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.809980][T17869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.874884][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1016.936413][T17869] hsr_slave_0: entered promiscuous mode [ 1016.953542][T17869] hsr_slave_1: entered promiscuous mode [ 1016.966927][T17869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.974480][T17869] Cannot create hsr debugfs directory [ 1017.129077][T17948] loop0: detected capacity change from 0 to 256 [ 1017.151999][T17948] FAT-fs (loop0): Directory bread(block 64) failed [ 1017.171697][T17948] FAT-fs (loop0): Directory bread(block 65) failed [ 1017.186984][T17948] FAT-fs (loop0): Directory bread(block 66) failed [ 1017.203603][T17948] FAT-fs (loop0): Directory bread(block 67) failed [ 1017.218649][T17948] FAT-fs (loop0): Directory bread(block 68) failed [ 1017.234643][T17948] FAT-fs (loop0): Directory bread(block 69) failed [ 1017.253950][T17948] FAT-fs (loop0): Directory bread(block 70) failed [ 1017.268713][T17948] FAT-fs (loop0): Directory bread(block 71) failed [ 1017.283550][T17948] FAT-fs (loop0): Directory bread(block 72) failed [ 1017.297058][T17948] FAT-fs (loop0): Directory bread(block 73) failed [ 1017.347238][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1017.393503][ T5353] bio_check_eod: 13 callbacks suppressed [ 1017.393515][ T5353] kworker/u8:8: attempt to access beyond end of device [ 1017.393515][ T5353] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 1017.434861][T17958] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1017.444180][T17958] bridge0: port 3(syz_tun) entered blocking state [ 1017.450638][T17958] bridge0: port 3(syz_tun) entered disabled state [ 1017.457351][T17958] syz_tun: entered allmulticast mode [ 1017.464019][T17958] syz_tun: entered promiscuous mode [ 1017.469423][T17958] bridge0: port 3(syz_tun) entered blocking state [ 1017.475923][T17958] bridge0: port 3(syz_tun) entered forwarding state [ 1017.524531][T17869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1017.538207][T17962] sctp: [Deprecated]: syz-executor.2 (pid 17962) Use of int in max_burst socket option deprecated. [ 1017.538207][T17962] Use struct sctp_assoc_value instead [ 1017.541456][T17869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1017.578401][T17869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1017.604778][T17869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1017.701668][T17869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.724702][T17869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.741443][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.748545][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.784194][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.791307][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.809690][T17869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.900570][T17869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.965489][T17970] hsr0 speed is unknown, defaulting to 1000 [ 1018.256348][T17869] veth0_vlan: entered promiscuous mode [ 1018.276641][T17869] veth1_vlan: entered promiscuous mode [ 1018.305342][T17869] veth0_macvtap: entered promiscuous mode [ 1018.322330][T17869] veth1_macvtap: entered promiscuous mode [ 1018.348195][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.358874][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.368815][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.379889][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.389719][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.400181][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.410668][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.421139][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.431039][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.442177][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.452057][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.462573][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.473151][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.483571][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.493402][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.504412][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.514265][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.524698][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.535549][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.546029][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.555850][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.566982][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.576823][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.587253][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.597716][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.608186][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.618717][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.629814][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.639661][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.650143][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.659939][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.671094][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.680934][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.691373][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.701795][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.712270][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.724032][T17869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.736379][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.746861][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.756696][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.767782][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.777610][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.788067][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.798660][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.809106][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.818984][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.830065][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.839948][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.850437][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.860881][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.871375][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.881245][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.892280][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.902106][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.912542][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.922963][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.933392][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.943213][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.954193][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.964110][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.974534][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.984407][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1018.995568][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.005394][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.015825][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.026230][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.036731][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.046548][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.057641][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.067487][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.077995][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.088525][T17869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.098956][T17869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.114242][ T29] audit: type=1400 audit(2000000392.777:50019): avc: denied { module_load } for pid=17996 comm="syz-executor.1" path="/root/syzkaller-testdir3033871176/syzkaller.y3Aapp/58/bus" dev="sda1" ino=2011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=system permissive=1 [ 1019.118464][T17997] Invalid ELF header magic: != ELF [ 1019.147348][T17869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.162077][T17869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.171444][T17869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.180181][T17869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.188929][T17869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.242912][T17994] __nla_validate_parse: 1 callbacks suppressed [ 1019.242995][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1019.381056][T18011] loop1: detected capacity change from 0 to 512 [ 1019.401530][T18011] EXT4-fs: Invalid want_extra_isize 1958 [ 1019.593413][T18030] sctp: [Deprecated]: syz-executor.0 (pid 18030) Use of int in max_burst socket option deprecated. [ 1019.593413][T18030] Use struct sctp_assoc_value instead [ 1019.900565][T18042] hsr0 speed is unknown, defaulting to 1000 [ 1020.524831][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1020.722170][T18102] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1020.885055][T18114] loop0: detected capacity change from 0 to 2048 [ 1020.945946][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1020.988577][T18114] loop0: unable to read partition table [ 1020.995289][T18114] loop0: partition table beyond EOD, truncated [ 1021.001486][T18114] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1021.154798][T18127] sctp: [Deprecated]: syz-executor.0 (pid 18127) Use of int in max_burst socket option deprecated. [ 1021.154798][T18127] Use struct sctp_assoc_value instead [ 1021.527971][T18132] hsr0 speed is unknown, defaulting to 1000 [ 1021.838701][T18136] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1021.856623][T18133] hsr0 speed is unknown, defaulting to 1000 [ 1021.970178][T18148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1022.007658][T18148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1022.418366][ T29] audit: type=1326 audit(2000000395.832:50020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18172 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f1110635667 code=0x0 [ 1022.857249][T18186] hsr0 speed is unknown, defaulting to 1000 [ 1023.185930][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1023.432669][T18194] loop1: detected capacity change from 0 to 8192 [ 1023.439850][ T29] audit: type=1326 audit(2000000396.785:50021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.464136][ T29] audit: type=1326 audit(2000000396.785:50022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.490101][T18194] loop1: p1 p2 p3 p4 [ 1023.494267][T18194] loop1: p1 start 17760256 is beyond EOD, truncated [ 1023.500886][T18194] loop1: p2 size 64053 extends beyond EOD, truncated [ 1023.523082][T18194] loop1: p3 start 458496 is beyond EOD, truncated [ 1023.529686][T18194] loop1: p4 size 50331648 extends beyond EOD, truncated [ 1023.538974][ T29] audit: type=1326 audit(2000000396.822:50023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.563783][ T29] audit: type=1326 audit(2000000396.832:50024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.588575][ T29] audit: type=1326 audit(2000000396.832:50025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.612663][ T29] audit: type=1326 audit(2000000396.850:50026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.641074][ T29] audit: type=1326 audit(2000000396.850:50027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.666546][ T29] audit: type=1326 audit(2000000396.850:50028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.690751][ T29] audit: type=1326 audit(2000000396.850:50029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa8c0793ee9 code=0x7ffc0000 [ 1023.772693][T18214] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1023.810682][T18219] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1023.927482][T18234] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1024.127434][T18250] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1024.482754][T18283] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1024.768745][T18310] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1025.127702][T18351] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1025.170158][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1025.259341][T18361] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1025.460832][T18385] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1025.898095][T18417] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1026.955124][T18460] loop0: detected capacity change from 0 to 128 [ 1027.123476][T18469] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 1027.193529][T18474] loop1: detected capacity change from 0 to 512 [ 1027.244223][T18474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.276205][T18474] ext4 filesystem being mounted at /root/syzkaller-testdir3033871176/syzkaller.y3Aapp/102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.345762][T18491] macvtap0: entered promiscuous mode [ 1027.383689][T18490] macvtap0: left promiscuous mode [ 1027.402020][T16761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.448169][T18506] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1027.460794][T18506] veth0_macvtap: left promiscuous mode [ 1027.472051][ T3181] IPVS: starting estimator thread 0... [ 1027.483560][T18506] veth0_macvtap: entered promiscuous mode [ 1027.506829][T18506] team0: Device macvtap0 failed to register rx_handler [ 1027.518221][T18506] veth0_macvtap: left promiscuous mode [ 1027.573129][T18513] IPVS: using max 2976 ests per chain, 148800 per kthread [ 1027.650861][T18534] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1027.733254][T18546] loop0: detected capacity change from 0 to 512 [ 1027.751194][T18546] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1027.905658][T18558] loop1: detected capacity change from 0 to 512 [ 1027.958388][T18558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.972439][T18558] ext4 filesystem being mounted at /root/syzkaller-testdir3033871176/syzkaller.y3Aapp/107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.002019][T18562] hsr0 speed is unknown, defaulting to 1000 [ 1028.033079][T16761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.170258][T18575] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1028.225685][T18580] loop0: detected capacity change from 0 to 512 [ 1028.240060][T18580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1028.295608][T18582] hsr0 speed is unknown, defaulting to 1000 [ 1028.379204][T18580] EXT4-fs (loop0): 1 orphan inode deleted [ 1028.385238][T18580] EXT4-fs (loop0): 1 truncate cleaned up [ 1028.480959][T18580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.685216][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1028.685229][ T29] audit: type=1400 audit(2000000401.635:50082): avc: denied { append } for pid=18596 comm="syz-executor.3" name="file0" dev="sda1" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 1028.716646][T18597] block device autoloading is deprecated and will be removed. [ 1028.868810][T18580] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1028.891988][T18580] EXT4-fs (loop0): Remounting filesystem read-only [ 1028.933342][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.102293][T18620] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1029.272632][T18642] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1029.365965][T18650] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1029.501537][T18656] hsr0 speed is unknown, defaulting to 1000 [ 1029.719390][T18672] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1029.849587][T18685] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1030.480251][T18751] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1030.584501][T18752] hsr0 speed is unknown, defaulting to 1000 [ 1030.886218][ T5351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.975689][T18760] hsr0 speed is unknown, defaulting to 1000 [ 1031.006661][ T5351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.103391][ T5351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.202052][ T5351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.224591][T18781] SELinux: Context system_u:object_r:dhcpc_exec_t:s0 is not valid (left unmapped). [ 1031.244601][ T29] audit: type=1400 audit(2000000404.005:50083): avc: denied { relabelto } for pid=18777 comm="syz-executor.2" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_exec_t:s0" [ 1031.273543][ T29] audit: type=1400 audit(2000000404.005:50084): avc: denied { associate } for pid=18777 comm="syz-executor.2" name="virtual_nci" dev="devtmpfs" ino=108 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_exec_t:s0" [ 1031.361109][T18752] chnl_net:caif_netlink_parms(): no params data found [ 1031.544960][T18810] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1031.584627][T18752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.591715][T18752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.598156][T18752] bridge_slave_0: entered allmulticast mode [ 1031.604949][T18811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=18811 comm=syz-executor.4 [ 1031.620635][T18752] bridge_slave_0: entered promiscuous mode [ 1031.628395][ T5351] bridge_slave_1: left allmulticast mode [ 1031.634038][ T5351] bridge_slave_1: left promiscuous mode [ 1031.639702][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.648641][ T5351] bridge_slave_0: left allmulticast mode [ 1031.654296][ T5351] bridge_slave_0: left promiscuous mode [ 1031.660764][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.844528][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.856175][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.870823][ T5351] bond0 (unregistering): Released all slaves [ 1031.878774][T18752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.886454][T18752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.893662][T18752] bridge_slave_1: entered allmulticast mode [ 1031.900282][T18752] bridge_slave_1: entered promiscuous mode [ 1031.924534][T18752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.939650][T18752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.982078][T18752] team0: Port device team_slave_0 added [ 1031.989607][T18752] team0: Port device team_slave_1 added [ 1032.003667][ T5351] hsr_slave_0: left promiscuous mode [ 1032.010267][ T5351] hsr_slave_1: left promiscuous mode [ 1032.027428][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.034883][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.046259][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.053790][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.078648][ T5351] veth1_macvtap: left promiscuous mode [ 1032.084195][ T5351] veth0_macvtap: left promiscuous mode [ 1032.089801][ T5351] veth1_vlan: left promiscuous mode [ 1032.095025][ T5351] veth0_vlan: left promiscuous mode [ 1032.309834][ T5351] team0 (unregistering): Port device team_slave_1 removed [ 1032.326123][ T5351] team0 (unregistering): Port device team_slave_0 removed [ 1032.410031][T18835] hsr0 speed is unknown, defaulting to 1000 [ 1032.483556][T18752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.490628][T18752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.516524][T18752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.547761][T18752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.554850][T18752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.580782][T18752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.610729][T18843] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1032.671651][T18752] hsr_slave_0: entered promiscuous mode [ 1032.684631][T18752] hsr_slave_1: entered promiscuous mode [ 1032.704567][T18752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.712351][T18752] Cannot create hsr debugfs directory [ 1032.744718][T18852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1032.765714][T18850] hsr0 speed is unknown, defaulting to 1000 [ 1033.053782][T18866] dccp_invalid_packet: P.Data Offset(0) too small [ 1033.237972][T18885] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1033.253346][T18752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1033.267325][T18752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1033.282946][T18752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1033.291928][T18752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1033.412792][T18752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.423497][T18895] dccp_invalid_packet: P.Data Offset(0) too small [ 1033.448046][T18752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.464591][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.471777][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.489435][T18901] loop0: detected capacity change from 0 to 2048 [ 1033.501050][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.508133][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.547728][T18752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1033.558786][T18752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.578796][T18901] loop0: unable to read partition table [ 1033.595065][T18901] loop0: partition table beyond EOD, truncated [ 1033.601392][T18901] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1033.677139][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1033.683771][T18752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.727017][T18919] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1033.832095][T18929] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1033.842267][T18928] loop0: detected capacity change from 0 to 512 [ 1033.865367][T18928] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1033.889771][T18752] veth0_vlan: entered promiscuous mode [ 1033.891901][T18928] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 1033.899256][T18752] veth1_vlan: entered promiscuous mode [ 1033.922755][T18928] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode # [ 1033.929833][T18752] veth0_macvtap: entered promiscuous mode [ 1033.958373][T18752] veth1_macvtap: entered promiscuous mode [ 1033.958389][T18928] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 1033.976743][T18941] dccp_invalid_packet: P.Data Offset(0) too small [ 1033.982008][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.993705][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.004411][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.014897][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.024753][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.028586][T18928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.035866][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.057197][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.068365][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.078195][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.088622][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.098561][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.109651][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.119501][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.129923][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.140362][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.150805][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.160638][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.171679][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.181537][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.191977][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.202406][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.212844][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.222659][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.233733][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.243564][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.254097][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.264578][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.275155][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.284978][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.296025][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.305857][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.316275][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.326087][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.337170][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.346993][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.357477][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.418034][T18752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.428339][T18948] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1034.457538][T18948] batman_adv: batadv0: Adding interface: team0 [ 1034.463774][T18948] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.489047][T18948] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1034.559194][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.569704][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.579511][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.589933][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.599735][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.610172][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.620042][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.630450][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.640254][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.650653][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.660524][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.670929][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.680814][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.691224][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.702080][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.712916][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.722792][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.733276][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.743113][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.753556][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.763368][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.773795][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.783665][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.794076][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.803920][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.814397][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.824198][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.834681][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.844479][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.854903][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.864712][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.875126][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.884974][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.895378][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.905227][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.915653][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.945617][T18954] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1034.968322][T14734] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1034.999913][T18752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.009986][T18951] hsr0 speed is unknown, defaulting to 1000 [ 1035.114193][T18752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.123747][T18752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.132668][T18752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.141565][T18752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.155861][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.329537][T18962] hsr0 speed is unknown, defaulting to 1000 [ 1035.619492][T18971] loop1: detected capacity change from 0 to 2048 [ 1035.638024][T18974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1035.719845][T18971] loop1: unable to read partition table [ 1035.731302][T18971] loop1: partition table beyond EOD, truncated [ 1035.738114][T18971] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1035.828574][T18992] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1035.840169][T18976] hsr0 speed is unknown, defaulting to 1000 [ 1035.997042][T18976] chnl_net:caif_netlink_parms(): no params data found [ 1036.104146][T18976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.111352][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.128365][T18976] bridge_slave_0: entered allmulticast mode [ 1036.150392][T18976] bridge_slave_0: entered promiscuous mode [ 1036.173269][T18976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.180392][T18976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.205013][T18976] bridge_slave_1: entered allmulticast mode [ 1036.222068][T18976] bridge_slave_1: entered promiscuous mode [ 1036.262040][T18976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.287372][T18976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.318308][T18976] team0: Port device team_slave_0 added [ 1036.327304][T18976] team0: Port device team_slave_1 added [ 1036.352123][T18976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.359102][T18976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.385180][T18976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.396567][T18976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.403564][T18976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.429627][T18976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.507838][T18976] hsr_slave_0: entered promiscuous mode [ 1036.520481][T18976] hsr_slave_1: entered promiscuous mode [ 1036.531166][T18976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1036.547955][T18976] Cannot create hsr debugfs directory [ 1036.686801][T19021] hsr0 speed is unknown, defaulting to 1000 [ 1036.776044][T18976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.842509][T18976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.843186][T19033] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1036.907917][T18976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.952170][T19037] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1036.997928][T18976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.069834][T18976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1037.086598][T19040] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1037.096605][T18976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1037.115316][T18976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1037.141422][T18976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1037.215960][T18976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.251760][T18976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.318547][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.325673][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.347529][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.354613][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.417002][T18976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1037.537907][T18976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.650025][T18976] veth0_vlan: entered promiscuous mode [ 1037.663685][T18976] veth1_vlan: entered promiscuous mode [ 1037.686217][T18976] veth0_macvtap: entered promiscuous mode [ 1037.695771][T18976] veth1_macvtap: entered promiscuous mode [ 1037.709319][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.719856][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.729810][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.740262][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.750133][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.760629][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.770527][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.780949][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.790852][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.801379][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.811300][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.821811][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.831650][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.842085][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.851985][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.862555][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.872439][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.882856][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.892653][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.903200][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.913108][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.923613][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.933480][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.943903][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.953752][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.964248][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.974071][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.984570][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.994407][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.004860][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.014686][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.025120][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.034943][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.045429][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.055404][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.065821][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.075812][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.086233][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.099171][T18976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.111886][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.122611][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.132888][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.143434][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.153566][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.164044][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.173863][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.184320][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.194255][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.204699][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.214570][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.224996][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.234890][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.245363][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.255187][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.265673][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.275601][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.286024][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.289512][T19087] 9pnet: p9_errstr2errno: server reported unknown error s [ 1038.295821][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.295838][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.295869][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.295882][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.295896][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.295909][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.295923][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.295934][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.295980][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.295994][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.296009][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.296019][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.296033][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.296124][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.296137][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.296150][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.296163][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.296176][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.296191][T18976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.296216][T18976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.300161][T18976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.520319][T18976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.529312][T18976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.538110][T18976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.546928][T18976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.683122][T19104] SELinux: security_context_str_to_sid (N:ُB GړbEkc{'\x.p0Txb\< JF) failed with errno=-22 [ 1038.729875][T19110] dccp_invalid_packet: P.Data Offset(0) too small [ 1038.744810][T19114] __nla_validate_parse: 3 callbacks suppressed [ 1038.744822][T19114] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1038.768861][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1038.784626][T19104] loop1: detected capacity change from 0 to 4096 [ 1038.802715][T19104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.892190][T18752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.892308][T19090] hsr0 speed is unknown, defaulting to 1000 [ 1038.950644][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1038.960078][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1038.994474][T19126] 9pnet: p9_errstr2errno: server reported unknown error s [ 1039.232937][T19148] team0: Device ipvlan2 failed to register rx_handler [ 1039.390405][T19154] dccp_invalid_packet: P.Data Offset(0) too small [ 1039.421407][T19158] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1039.531256][T19170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.552220][T19171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.595933][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1039.605214][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1039.651756][T19176] 9pnet: p9_errstr2errno: server reported unknown error s [ 1039.672909][T19179] loop0: detected capacity change from 0 to 1024 [ 1039.684899][T19179] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1039.701101][T19179] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1039.710210][T19179] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1039.719027][T19179] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 1039.739087][T19179] EXT4-fs (loop0): 1 orphan inode deleted [ 1039.745327][T19179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1039.764248][T19179] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1039.767329][T19188] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1039.814155][T18976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.862427][T19193] dccp_invalid_packet: P.Data Offset(0) too small [ 1039.894764][T19198] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1039.928462][T19199] xt_hashlimit: overflow, rate too high: 0 [ 1040.004258][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1040.014207][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1040.078323][T19211] 9pnet: p9_errstr2errno: server reported unknown error s [ 1040.204183][T19213] hsr0 speed is unknown, defaulting to 1000 [ 1040.344602][T19223] Cannot find del_set index 0 as target [ 1040.356172][ T29] audit: type=1400 audit(2000000412.434:50085): avc: denied { append } for pid=19218 comm="syz-executor.3" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1040.405981][T19230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19230 comm=syz-executor.3 [ 1040.436951][T19230] dummy0: entered promiscuous mode [ 1040.451672][T19230] bridge0: port 3(team0) entered blocking state [ 1040.458050][T19230] bridge0: port 3(team0) entered disabled state [ 1040.469064][T19230] team0: entered allmulticast mode [ 1040.474190][T19230] team_slave_0: entered allmulticast mode [ 1040.479958][T19230] team_slave_1: entered allmulticast mode [ 1040.495061][T19230] team0: entered promiscuous mode [ 1040.500172][T19230] team_slave_0: entered promiscuous mode [ 1040.505864][T19230] team_slave_1: entered promiscuous mode [ 1040.524567][T19230] bridge0: port 3(team0) entered blocking state [ 1040.530855][T19230] bridge0: port 3(team0) entered forwarding state [ 1040.570568][T19235] loop0: detected capacity change from 0 to 512 [ 1040.620040][T19235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.643078][T19235] ext4 filesystem being mounted at /root/syzkaller-testdir759127919/syzkaller.YKZ5Y2/17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.691658][T18976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.828607][ T29] audit: type=1400 audit(2000000412.878:50086): avc: denied { execstack } for pid=19244 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1040.831456][T19249] loop0: detected capacity change from 0 to 128 [ 1040.868072][T19249] FAT-fs (loop0): Unrecognized mount option "ip6tnl0" or missing value [ 1041.458796][T19262] loop1: detected capacity change from 0 to 1764 [ 1041.589167][T19277] hsr0 speed is unknown, defaulting to 1000 [ 1042.145063][T19319] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1042.195873][T19322] sctp: [Deprecated]: syz-executor.3 (pid 19322) Use of int in maxseg socket option. [ 1042.195873][T19322] Use struct sctp_assoc_value instead [ 1042.422285][T19333] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20002 [ 1042.430345][T19333] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1042.507388][ T29] audit: type=1326 audit(2000000414.423:50087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.537319][ T29] audit: type=1326 audit(2000000414.423:50088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.562145][ T29] audit: type=1326 audit(2000000414.432:50089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.586882][ T29] audit: type=1326 audit(2000000414.450:50090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.611083][ T29] audit: type=1326 audit(2000000414.450:50091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.635728][ T29] audit: type=1326 audit(2000000414.450:50092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.660811][ T29] audit: type=1326 audit(2000000414.450:50093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.685138][ T29] audit: type=1326 audit(2000000414.450:50094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0a67d4eee9 code=0x7ffc0000 [ 1042.799835][T19343] dummy0: entered promiscuous mode [ 1042.808636][T19343] dummy0: left promiscuous mode [ 1043.805074][T19369] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20002 [ 1043.824801][T19369] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1043.897952][T19381] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1043.929999][T19384] sctp: [Deprecated]: syz-executor.3 (pid 19384) Use of int in maxseg socket option. [ 1043.929999][T19384] Use struct sctp_assoc_value instead [ 1044.053083][T19394] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1044.062798][T19394] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1044.112279][T19398] loop0: detected capacity change from 0 to 128 [ 1044.124705][T19398] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1044.343916][T19404] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20002 [ 1044.352503][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1044.574731][ T1662] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1044.697524][T19416] loop0: detected capacity change from 0 to 256 [ 1044.711358][T19416] FAT-fs (loop0): Directory bread(block 64) failed [ 1044.718803][T19416] FAT-fs (loop0): Directory bread(block 65) failed [ 1044.729516][T19416] FAT-fs (loop0): Directory bread(block 66) failed [ 1044.736210][T19416] FAT-fs (loop0): Directory bread(block 67) failed [ 1044.742965][T19416] FAT-fs (loop0): Directory bread(block 68) failed [ 1044.751436][T19416] FAT-fs (loop0): Directory bread(block 69) failed [ 1044.760686][T19416] FAT-fs (loop0): Directory bread(block 70) failed [ 1044.767309][T19416] FAT-fs (loop0): Directory bread(block 71) failed [ 1044.775407][T19416] FAT-fs (loop0): Directory bread(block 72) failed [ 1044.790909][T19416] FAT-fs (loop0): Directory bread(block 73) failed [ 1044.854761][ T7348] kworker/u8:53: attempt to access beyond end of device [ 1044.854761][ T7348] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 1044.898206][T19421] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1045.059118][T19430] __nla_validate_parse: 6 callbacks suppressed [ 1045.059132][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1045.130748][T19435] loop0: detected capacity change from 0 to 128 [ 1045.142790][T19435] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1045.148327][T19433] loop1: detected capacity change from 0 to 1024 [ 1045.183008][T19433] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1045.193950][T19433] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1045.220361][T19433] journal_load_superblock: Cannot read journal superblock [ 1045.227556][T19433] EXT4-fs (loop1): Could not load journal inode [ 1045.280196][T19433] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20002 [ 1045.374441][T19445] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1045.439677][T19448] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1045.511268][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.537096][T19463] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1045.740190][ T1662] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1045.832069][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1045.874881][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.936652][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1045.968869][T19492] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1046.145541][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1046.175176][T19519] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1046.226382][T19526] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1046.298709][T19531] loop0: detected capacity change from 0 to 2048 [ 1046.316305][T19531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.394400][T18976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.477360][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1046.578255][T19552] loop0: detected capacity change from 0 to 256 [ 1046.604806][T19556] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1046.794189][T19572] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1046.931311][T19582] veth0_vlan: entered allmulticast mode [ 1046.982604][T19583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.016170][T19580] loop0: detected capacity change from 0 to 256 [ 1047.024100][T19582] : renamed from veth0_vlan [ 1047.053031][T19580] TCP: TCP_TX_DELAY enabled [ 1047.268272][T19596] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1047.438019][T19598] delete_channel: no stack [ 1047.668931][T19609] IPv6: NLM_F_CREATE should be specified when creating new route [ 1047.756138][T19620] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1047.770219][T19618] loop0: detected capacity change from 0 to 2048 [ 1047.839189][T19618] loop0: unable to read partition table [ 1047.845001][T19618] loop0: partition table beyond EOD, truncated [ 1047.851568][T19618] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1048.082696][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 1048.082709][ T29] audit: type=1326 audit(2000000419.584:50325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.135615][ T29] audit: type=1326 audit(2000000419.584:50326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.160478][ T29] audit: type=1326 audit(2000000419.584:50327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.185293][ T29] audit: type=1326 audit(2000000419.593:50328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.209562][ T29] audit: type=1326 audit(2000000419.593:50329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.234357][ T29] audit: type=1326 audit(2000000419.593:50330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.258546][ T29] audit: type=1326 audit(2000000419.612:50331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.283302][ T29] audit: type=1326 audit(2000000419.621:50332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a9977b667 code=0x7ffc0000 [ 1048.307474][ T29] audit: type=1326 audit(2000000419.621:50333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a99741329 code=0x7ffc0000 [ 1048.332058][ T29] audit: type=1326 audit(2000000419.621:50334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9977dee9 code=0x7ffc0000 [ 1048.819755][T19644] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1048.888012][T19647] loop0: detected capacity change from 0 to 2048 [ 1048.900141][T19652] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1048.982117][T19647] loop0: unable to read partition table [ 1048.994955][T19647] loop0: partition table beyond EOD, truncated [ 1049.001184][T19647] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1049.130490][T19677] loop1: detected capacity change from 0 to 128 [ 1049.147032][T19677] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1049.315560][T19687] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1049.377876][T19687] loop0: detected capacity change from 0 to 512 [ 1049.407057][T19687] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1049.528518][T18976] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1049.668569][ T7348] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1049.823621][T19718] loop1: detected capacity change from 0 to 2048 [ 1049.865393][T19722] loop0: detected capacity change from 0 to 4096 [ 1049.885537][T19722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.940453][T19718] loop1: unable to read partition table [ 1049.946175][T19718] loop1: partition table beyond EOD, truncated [ 1049.952435][T19718] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1049.987402][T18976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.394383][T19759] loop1: detected capacity change from 0 to 4096 [ 1050.408381][T19759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.474835][T18752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.541032][T19764] loop1: detected capacity change from 0 to 2048 [ 1050.611333][T19764] loop1: unable to read partition table [ 1050.620235][T19764] loop1: partition table beyond EOD, truncated [ 1050.626448][T19764] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1050.719588][T19768] __nla_validate_parse: 19 callbacks suppressed [ 1050.719601][T19768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1050.768304][T19770] loop1: detected capacity change from 0 to 512 [ 1050.777482][T19770] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1050.785866][T19770] EXT4-fs (loop1): 1 truncate cleaned up [ 1050.792074][T19770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.013086][T19783] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1051.026372][T18752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.056360][T19785] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1051.168435][T19804] loop1: detected capacity change from 0 to 512 [ 1051.191324][T19799] loop0: detected capacity change from 0 to 4096 [ 1051.206877][T19799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.226217][T19804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.238764][T19804] ext4 filesystem being mounted at /root/syzkaller-testdir584234481/syzkaller.xGr4om/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.260714][T19804] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 1051.266599][T19808] syz_tun: entered promiscuous mode [ 1051.282678][T19808] macsec2: entered promiscuous mode [ 1051.287967][T19808] macsec2: entered allmulticast mode [ 1051.288414][T19804] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 1051.293238][T19808] syz_tun: entered allmulticast mode [ 1051.313467][T19808] syz_tun: left allmulticast mode [ 1051.318563][T19808] syz_tun: left promiscuous mode [ 1051.328598][T19804] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 1051.344387][T19804] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 1051.352431][T19811] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1051.379967][T18752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.465836][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.551148][T19821] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1051.656349][T19828] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.787031][T19837] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1052.078869][T18976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.461730][T19857] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1052.556807][T19861] Cannot find add_set index 0 as target [ 1052.659980][T19865] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 1052.720384][T19869] loop1: detected capacity change from 0 to 128 [ 1052.731324][T19869] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1052.971464][T19882] devtmpfs: Too few inodes for current use [ 1053.267947][T19893] x_tables: duplicate entry at hook 1 [ 1053.415316][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1053.556521][T19914] loop1: detected capacity change from 0 to 128 [ 1053.557819][T19912] loop0: detected capacity change from 0 to 512 [ 1053.577665][T19914] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1053.607431][T19912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.643584][T19912] ext4 filesystem being mounted at /root/syzkaller-testdir759127919/syzkaller.YKZ5Y2/86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.680918][T19912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.784101][ T7329] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1053.978746][T17500] bridge0: port 3(syz_tun) entered disabled state [ 1054.024770][T17500] syz_tun (unregistering): left allmulticast mode [ 1054.031278][T17500] syz_tun (unregistering): left promiscuous mode [ 1054.037656][T17500] bridge0: port 3(syz_tun) entered disabled state [ 1054.050031][T19950] loop1: detected capacity change from 0 to 512 [ 1054.079666][T19950] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1054.087867][T19950] EXT4-fs (loop1): 1 truncate cleaned up [ 1054.094140][T19950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.137877][T18752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.182594][T19945] hsr0 speed is unknown, defaulting to 1000 [ 1054.215971][T19959] loop1: detected capacity change from 0 to 128 [ 1054.237063][T19959] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1054.250203][ T7330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.312305][ T7330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.335195][T19945] chnl_net:caif_netlink_parms(): no params data found [ 1054.365784][ T7330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.466716][ T7330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.555022][T19945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.562162][T19945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.575951][T19945] bridge_slave_0: entered allmulticast mode [ 1054.597326][T19945] bridge_slave_0: entered promiscuous mode [ 1054.619255][T19945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.626356][T19945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.640561][T19945] bridge_slave_1: entered allmulticast mode [ 1054.647123][T19945] bridge_slave_1: entered promiscuous mode [ 1054.701884][T19945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.711124][ T5353] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1054.731992][T19945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.765280][ T7330] bridge_slave_1: left allmulticast mode [ 1054.771073][ T7330] bridge_slave_1: left promiscuous mode [ 1054.776732][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.795843][ T7330] bridge_slave_0: left allmulticast mode [ 1054.801528][ T7330] bridge_slave_0: left promiscuous mode [ 1054.807311][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.943843][ T7330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.964776][ T7330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.984371][ T7330] bond0 (unregistering): Released all slaves [ 1055.000969][ T7330] bond1 (unregistering): Released all slaves [ 1055.016907][T19945] team0: Port device team_slave_0 added [ 1055.040200][T19970] tun0: tun_chr_ioctl cmd 1074025676 [ 1055.045519][T19970] tun0: owner set to 0 [ 1055.050747][T19945] team0: Port device team_slave_1 added [ 1055.053492][T19975] loop0: detected capacity change from 0 to 128 [ 1055.064733][T19975] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1055.082177][T19945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.089241][T19945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.115159][T19945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.142599][ T5351] ================================================================== [ 1055.150787][ T5351] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 1055.159301][ T5351] [ 1055.161614][ T5351] write to 0xffff888155589d22 of 1 bytes by task 19976 on cpu 0: [ 1055.169325][ T5351] tty_set_termios+0x4c9/0x8b0 [ 1055.174094][ T5351] set_termios+0x365/0x4e0 [ 1055.178522][ T5351] tty_mode_ioctl+0x391/0x5d0 [ 1055.183211][ T5351] n_tty_ioctl_helper+0x8d/0x240 [ 1055.188161][ T5351] n_tty_ioctl+0xfd/0x200 [ 1055.192493][ T5351] tty_ioctl+0x886/0xbe0 [ 1055.196748][ T5351] __se_sys_ioctl+0xd3/0x150 [ 1055.201345][ T5351] __x64_sys_ioctl+0x43/0x50 [ 1055.205944][ T5351] x64_sys_call+0x1581/0x2d70 [ 1055.210633][ T5351] do_syscall_64+0xc9/0x1c0 [ 1055.215151][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.221061][ T5351] [ 1055.223384][ T5351] read to 0xffff888155589d22 of 1 bytes by task 5351 on cpu 1: [ 1055.230931][ T5351] n_tty_receive_char_flow_ctrl+0x58/0x1a0 [ 1055.236793][ T5351] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 1055.242345][ T5351] tty_port_default_lookahead_buf+0x8a/0xc0 [ 1055.248253][ T5351] flush_to_ldisc+0x31c/0x410 [ 1055.252942][ T5351] process_scheduled_works+0x483/0x9a0 [ 1055.258405][ T5351] worker_thread+0x526/0x730 [ 1055.263007][ T5351] kthread+0x1d1/0x210 [ 1055.267079][ T5351] ret_from_fork+0x4b/0x60 [ 1055.271497][ T5351] ret_from_fork_asm+0x1a/0x30 [ 1055.276270][ T5351] [ 1055.278625][ T5351] value changed: 0x13 -> 0x50 [ 1055.283290][ T5351] [ 1055.285618][ T5351] Reported by Kernel Concurrency Sanitizer on: 2033/05/18 03:40:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1055.291762][ T5351] CPU: 1 PID: 5351 Comm: kworker/u8:6 Tainted: G W 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 1055.303574][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1055.313625][ T5351] Workqueue: events_unbound flush_to_ldisc [ 1055.319456][ T5351] ================================================================== [ 1055.343055][ T29] kauditd_printk_skb: 2791 callbacks suppressed [ 1055.343069][ T29] audit: type=1400 audit(2000000426.289:53126): avc: denied { write } for pid=3074 comm="syz-fuzzer" path="pipe:[1586]" dev="pipefs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1055.387650][T19945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.394596][T19945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.421176][T19945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active