last executing test programs: 3.093875248s ago: executing program 1 (id=4985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x2c}}, 0x0) 2.671913052s ago: executing program 1 (id=4991): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) flock(0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) 1.023318186s ago: executing program 0 (id=5024): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x204}, {&(0x7f0000000bc0)="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", 0x103}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 985.337609ms ago: executing program 4 (id=5025): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 959.568412ms ago: executing program 2 (id=5026): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) fcntl$setownex(r2, 0xf, &(0x7f0000000380)={0x2, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000004c0)='\x00', &(0x7f0000000500)='./cgroup/syz1\x00', 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name, 0x6) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r11, r10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x8) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$SCSI_IOCTL_GET_PCI(r13, 0x2284, &(0x7f0000000000)) 929.932884ms ago: executing program 0 (id=5028): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff9d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) 892.599587ms ago: executing program 4 (id=5029): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000001980)=ANY=[@ANYBLOB="46040000", @ANYRES32=r1, @ANYBLOB="ff00", @ANYRES32, @ANYRES8=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000001b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000001700)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="12ce2f26", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250500000005002e0000000000080039000200000008000300", @ANYRES32=0x0, @ANYBLOB="08002c000000000008002c00fdffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000016c0)={@private1, 0x7, 0x0, 0x1, 0xe, 0xff, 0x6b9}, 0x20) connect$inet6(r0, &(0x7f0000001680)={0xa, 0x4e23, 0x40, @loopback, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000680)={{r5}, "cd9d9fbce61c7e84c467d3db6890dc9568c9e9f48a8b8ccc2f564afcb00e9d9d1aefc3267d35f12f80e1174613bd9dc1016b377269923ef71eda3ccc753c71596982ca49f09f5601e198c7ad0ef267ca6a7ee9cb24252c467189d25b98b138e6e6128cb5a3fa157baf5f79edee76ac041af636c9af4b47670831184a2b485a0a61f0a12b6a5cfe0345bdd319a405fee174670a09da41ae49f74db6c3e4e127e45e231e99c5ebd7aec612556f414680248fd0abb0b32195ff58ac2f0a0f52c78b1c57e62b5dbc62e4a4adfafedafbff339458a0923554ad223a8998d8fe216c8b8ed311d632de27c7f56270dcf51ce22315da755d2118193ff901e6a7a40d0f96792a3df62ecca790f30feaf05b9cf0bef4bce5beb3760a20c8f1b233a418f4842688f5c4c7338a73f49d2bd80abb465653b0dab206a38d7c308b735adfb5b07fff26680a220f7fea765ce4a0f45aa51ce5eebb58f5d49e0bf853c9276db424274886e825db93d52c4fa32ece17e3be92f78aa050e1b419742b3a231a1b98c890ead95149b29f79740ffa4ad7b6ae0d237b1bcd6642fc83c5872267c93212b03fc94e13bc51361a14af19bdebb62cf512dae80dbb3d6f542de4c3819274ec5b3f0e6836264a3fd64f22068a897b91ec6b8b565f3449a313e76c3ae29922e86286c1314b094c63aa0ec393a7d072c7488d9f1c70b1954f6a069afa325df317493a71a855b294ec4e10b645677cf1d325b224464ed4b37ecf72faab38eaa0a7632ed1bcfcae35b66ece200f8f32aa79349a15e6bdd39d34dc3d95d28d44675c87bc22fd05820ec777f0022fee76eb2837acfe650c96c7221337cfbe77b6d7f5b273ba85aaa17474586373cc2f32b84a498cf1327a72b0676005839a9fdfdcb581d981bab01d86d2e49955438036d7b85acafb214bbbdcf196974f4cc6bf13280776a54664bd0599fe645d4fcf75bc99dc1abdb21a38e17d7d8c9e8275569cee12db25669eb1b653eb038d5db16f0821f076354432e67291a7de803b50b5d2d69c4e5b2d81ca9147a659a54053869e21c9d6eecb3a264bfbaca25b7a578cb29aaca6b1bdb6369d6dfe3019ef6a73a4743cd80b1d5808d32aeca6bde55076ceb85f41090b71ac911563731ff4a912e5a0dbf786714f3102e2d8a857b8e88e531604c26e27bcf0b1c4fbd29f05af8260497f9d97975b269a270771f1e8d69383fabfb1d63c5b3a626fb20647baafd353c7b3a7309f435e177f9521542500d34aadcf6f15e6f642a63ada54a3ae72aa9a230bd5895c6db7c1144f1425c99d60eb883859f1642c6eca5bdb0df434ecba1ab944ec65619e5a91a4a5f7b827763d2ae0c125a1a6d7f5cbb7aacd30cc508d395b810965c5b77f66d0c8173eb078cc07d1b1db4f878ee586eb06b7d8ca130763dff9186a2893c4c6140d2e7b0c0a86994f61922502888b5d66105cbc19650db8a7ac868ebf78f3a6f19be2f49a81df5f00b34b414243a248aa7a0eac476fcc08bb24ea98683fbb4fa5fdcfae018eccfb47279c28d27b9b94adf09b3cff895a569ba3a4dfded9523f1ccb96ccd262a29aaa84f145ec4af013e938bdb75965c867a9ace4f725110fb931e2acb17fa4507bb6f685632c4d7814864db530e457aa4d7f47e556d2ba93778278702630f2d90622df2dd38ede7c7f39045144133f8888233537bffdfaf490dd92abcc6bebc3b0cc2cfe71100213cfea0718c3e8592f88746db2571c18885d2cbc2d67d0ab2d42bb3403c416e33d524a691e5abfe75085629badfd9b426ad61c8355039f8a272f6a569f5ecfe6995ec5796a7d4b82c61f76691e453f3a6a08daf2aede316f01fccb82d2ed2d702f4791f52840a5098a005076e98f7429b534f089fa49fdfd41a2a40980171a33d102f6fea31001882ceec41e156863f8c69640504c15938b3bf402415561951476bf3d4ce58536450716d783900e9ef51d1bff8ff6a307cf3381c6ebb6ef68d1a3251ca501a15b9289f056ad7cf7b25d505bec2fa46e1973abc05242b50c13c26c5873541875d5b3532385c077c52eb579a386aaf63a1ba6c38348d40b731b385c6342e4d9667b3f3e8b64745d9eb56e1a92640b5c3ec3bba3dc57e483994e5fbec3378060dcd97a46514d90be5f32cda451a15e8fe7f81fd3d9bdbc8c1129090dc5b229778aef5aa5e07457bb00fc29773e04bc3191f488aca7e19b0bc41d350621b2a7227a2ebea95d7ed4e798a4add6ff0fa933d9b971115bb22bc6701e59afa13aa761c55d0560219cbd73a9abdffae510247aaf1a88217b4f574317f1ee562ca69c0c657aa044e3a188d014da89ba675b20417f0716a407ca22c4d251413ec8950e3c3e12d3d8eea5b0831f2f23214823ec53032f288dd117f3d64e724ef2fe4c886ba4f873c94764f62194e6650288230921ead8784dfda87605630f1fc962dc43614f9fe30d6c302ccc30852af18e45ef96590acbbaf481e9d789eb2e83a0df1a3c41966e0923233c3a5553e2d6413ba7a790cfb38069317b634d3dae4cde56f3a2a22680a8f70ef57b8a0c1d9aeb585ef6e375b20a710d72c8cb030ff961461c8019ea2310211494f327dda59232dee00ff2265c0164918199fd7be2ff21692d03f2c109f774f65f2861b38830cb2490aa01508435cb773b1b428f443ebf5e7ba2c632e1a897e56e9c83525bf7301e557b3ed57c9d0f657376fe8509d04c5d8361e6899116f57db3b238fc07752e518f583a3b54757df825c89d5200261747c6fc558c5c1752ef2d5c394738e5334e999efe2f3467cb89ba57b7a85c2540d4088f582fdf8e25803884a3582d3ac9f2d2e6681fd264d457e61b340228500d334791f2ec94bc10a2fde18ae73c8970cf848855b4412f5b65d9494d18bf3a4a96541d7c4323d60529a8419202b652d3884c2dbd49e904f0cc196896c26881ddcf32c47122b33e6ee66a107e3a1da25d6ca25a44d58eff6805972d41869c68cab33ebde96c6dad4ef54fe0cbcb2033a180f814fb1295e2b4308371526bc04ee3f59b1a995cf564a922333c186c0683427c900c964fdf888933f133b9b8587ca9d841d0a9fd7ed91be34d0b1aab5c08e0f5905d1a589becc9214324d092aba9b0d5b355b5409c75113a6bce737c4ce5363cc27617ddadd866a932444d279d658cd05bfe199f731709545acf324063c480611688966ed4e75847450bd6e496f5cfd72e10f93cf8c10984db064a58237073fa874bc11a7965d304784c53d9d93bd6f93b2880c87d899351866d2fb31b475e53b73ef6f491217e7c2e0b50b1cc192e16e99ccda15755341c984aedc1b3f7c6cc658bcf3ddca8bf58bdf4fcacbdbe8277a8e4f0b2deb123a53fed81235ddea3725acf8d9cecd6deca599c1e7918fe8995239a3a7cba8cf1a9ab0d7d6f05aba741eb7e904c6667721cebfe3f286568c95efca9f7b95f009c1d2618115f4a8b5b8ae834f606fee36b9c7d4b87fcaa7d720df9831e244f0fe32949a5d759c276cd417fb4a5397567ed4d56ae5db7ba0c44b1de88a8f88545bed546b597a81ece83e14b99d3953d827d7cca58543b11b02104c2fd122885ca640cf97e07de5ac4475f2f694c4db275b92f4c78584b7f3bb839f6dcd71e32cc550160b2938cbf0c8a6f973958b53049124da93e168bd85c1c67e3106ed683b6a2b701d2647eeb950b01fd52bb9f062bad1b37cd4d1511c12b0e5e587764f9ed4abc3948db39352e8e0600fe9832e13a17fdee8d06405da774f88fd612b072f200860beb9fd5cbeb87d6c2e0e42480aa590a1241d0e6f0e27ad9065da1438ad54ddc2d69395dcac3d56cb9417f86b9c805344b679fadc7143e9948d1a164b34dd8bb7d4817a7304cfd6a21f595b407043f679a9c1097a7a66c695c19119b9e1f8a21896e1b643bfd88d5be74d788800f79af08006ef025c8a7c5b2f496526f5866ca88e503b144f1a6b262dd55ae144eeba830ca10b2880a9afab4e4a9e8c3c4af25fdbff5a531b5787aaf0dba85f698768846adda30f14bdde56eb0d9cbcc399e6c1ddb7e794f59bd32ef797e43bddcfee7c2d7b6fb74bb6c3a12f68eb3610faf88228225718684bbb25a1f73f1c9cdf1c3098d22b5750c27c92f81c616bc758b9e6a1d402288bcfb2c3786cba4d1f16e2e925c9d6beefa0270728f823b7ab5c6f155000284ddb7afe065d69b7dec4a2d0bd12a15f71b4c3a7e50aaf45e38dc6d4522cc8bfd8c6b869868d56d8e3a921731579bc22fa6bae120055c724f41f8aeeb75180b16434ee858e8ec667702103b751fc99780cd045b857fb62e37881d2ca0c8195fb87b80538ff9a9fb9435dbf5e3160fe1ae2fb7ff9f358002a5bdf877354d0723d329564c1aae5a1e1f4fb01106d45b77b0b175675603570640cbb56ebc3edd55f9ff752d287e4246164e49b669c57117902a715e802f02a1030d21e8f865c9b610c0bb1a9ca35e4441291b3ffc017bcda4ac3fbdb28f313da5be1fce51759c1ae1c2ff7bbe028736f760cec334dc81a9197ea423de3ca55c4f5a73a86f00f6da8801fafcffc32e2f886627d1fdbfa216134508c60d38dd3a946a36076754ad634b25aa533b7ce9ddd6984fd95bd2280ce9a50063166f7b85e0803b19221df7708d1b2d90a401e980f3f99a03c02d45fefcf9bd28eeb68930f14d50ed68df59266143a27115c6fe3ce7ff8e51780868c726cdba1a9c609a0daee10e96722c2db712fa2c212195cb3509aafd6012d15e9fca7996bfa834c0f5bc3edad19b74efc0b3ad3a4a26cbdbe0864f446476bcaccd7bc2a63bdf1d1494b66eb4143f4ec8235c82d023c05d85b0b652f8ca19c2767c3e1b5ab5ce814d460705d9413dbcf720fe5a25b96cc049b7343d34a714fe50cd0c2d9fe4ea6fdb520230fe3be0105bfbf9723bd71358bbe9192b595b6a47b7f14f446d340ef652e2919816b0f380e5139c9801bb202dabce04625bf910f47663d8574c7382bc4300994b24ed4479124a95a5a12d9a9c3b1f57d1ef69ab7ebb635e881d9e02348425fba8c08c58c12fc9dcb4a89e8dc551071c3b7b5bbe93f55042ae7e20c2c0ba5d75c46dd373449365539154528271ce284841f940ed0dee5d5eccdc4d267d071b760159e9d52adc74e21961eea8959a37f7cd794ff1640b708db709bfc9dcfa1268a37ce42d901b6548fb1535358918a9ca9164982a4f30765213816f5941602b6eafca2d1820e549a594677464289f6c96b816df159934a8d274c27cbdc4c68a82e9acf1e5f15449cc825bc7622cb6f2a14ce767005227eb256ad1bb0715fabff73a1451c034fec8b10b5e09d76d3b930bacd713b26e4d89c0dc55b34a526a508d2330ac6fac0f5725d8d30b7609f23a60680f58c9c6222cc839c8806a40f88a7aca7a5e6aa259446458841d6131640c8b237abe4bfbd7430fe57ab6d76affe6715342e2af6bf74075ec01b99dab9d91f5c49ec9a69c517c0b54f56bc2fef7aea9835a1b5ee57e7b788b5c814f10fefa15100519161b29d96ea04150a432c68c8548bae22f4a8b6db430281f86c819e112f7f5f4ec955842320216b196d096c78bd827d6c4580642717f34a205247669d66b0fdcfe76c0b0c23b5410a8241d5caa708ab2540559e7550dbee84798a44dd9c74e22ad91bfcf0b73bd3ae577c16c60556026b6c975836df58e91198dc5b011ef052d1437b13de30cc02c8b24b44298e4ed14cfaa8f4be4e596c27494099f8ec1ca45abbf7a1b84c5bcbd7b525cf56a5fa3f06824c11b9e0411dbd82529"}) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$igmp(0x2, 0x3, 0x2) tee(r8, r7, 0x100000003, 0x0) r9 = accept(r8, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000580)=0x80) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @remote}, 0x10) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000001c0)={r11, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x2, &(0x7f0000000100)={r11, 0x1, 0x3, @remote}, 0x10) sendmsg$nl_route(r9, &(0x7f0000001780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000001b80)=@can_delroute={0x184, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x8, 0x0, 0x0, 0x4, 0x4, "885d0ae7c872f24b80f7596f8f5cc5065fceb8289d666d5b30c54d05690312c1c023cf71269c39aae32473e796aec042075106cd2f91ffc3a878bed6429aaf0fcd9ddcc05cfdd067b9014641258d4ace00253c0c95f4dce7cc9273e677b247504062c1aacbc6d07753dc0e64eefb7b0f75b660715f22ecd446d4acb9d095c5fad88a3a15361dfeb4f9c6327001cd30663711a93c559c312c3b21ba820b40421660b7e13987b2dba424797221677c4088d42c73b9a27dcb73344d86ca061e6ac7fce603eb3e0a4f345fd65d50d19f9350dcf991083fff7a763c6c6d00bd704d0b9da83c2a45f7cad7a7d64c6da202b326f89500", 0x3, "66d5a501000000a6f8c55aa2b4007d9ee9ab323e"}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x4, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "4af026a5d6a21fc9"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "b2c42abe475533e8"}, 0x1}}, @CGW_FILTER={0xc, 0xb, {{0x4}, {0x3}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x24000001) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001800), 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}], 0x1, 0x0) 881.637328ms ago: executing program 2 (id=5030): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 801.884295ms ago: executing program 4 (id=5032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 783.003096ms ago: executing program 4 (id=5033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 766.090257ms ago: executing program 4 (id=5034): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@union={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x85039ff06886cae7, 0x2e, 0x5f]}}, 0x0, 0x2e}, 0x20) 755.662348ms ago: executing program 4 (id=5035): socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}, 0x111500}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd08}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x30}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 644.151317ms ago: executing program 0 (id=5036): creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1268, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) 626.727829ms ago: executing program 0 (id=5037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 626.211909ms ago: executing program 1 (id=5038): unshare(0x22020400) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) 605.33639ms ago: executing program 0 (id=5039): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') fchmod(r0, 0xaf394cc1b5592f0a) fchown(r0, 0x0, 0xffffffffffffffff) 588.206212ms ago: executing program 1 (id=5040): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 587.556012ms ago: executing program 0 (id=5041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 582.783512ms ago: executing program 1 (id=5042): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0xa, &(0x7f0000000040), 0xffffffffffffffc7}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 572.344673ms ago: executing program 1 (id=5043): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x6}], 0x300) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a840008100000008004500002400000000042f9078e00000010000000000000000001090780200000000000000"], 0x0) sendto$inet6(r2, 0x0, 0x14, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$evdev(&(0x7f0000000100), 0x48ad000000000000, 0x24100) sendmmsg$inet6(r3, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000fc010000000000000000000000000001", @ANYRES32, @ANYBLOB], 0x28}}], 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000001f80)) 499.688309ms ago: executing program 3 (id=5048): r0 = gettid() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 467.479302ms ago: executing program 3 (id=5049): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b50a0000000000007baaf0ff00000000cf8600000000000007080000f8ffffffbfa410000000000007040000f0ffffffc7020000a21eb58e18220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 467.170001ms ago: executing program 3 (id=5050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 466.559182ms ago: executing program 3 (id=5051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_DESC={0x54, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x28}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000829bd7000fddbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB="06000900ffff000008000300", @ANYRES32=0x0, @ANYBLOB="064a0900000000000c00d3b23e17550d6faf0000065e485e1d6f0009000021d4000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x11f7, &(0x7f00000024c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000019000400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a0035000000"], 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'dsmark\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV6ADDR={0xf, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048841}, 0x4040004) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x3c, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xc}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20008080) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000e500fdff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x1, 0x20000009, {{0x14, 0x4, 0x0, 0xf, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x50, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @loopback]}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0x5}, @lsrr={0x83, 0x17, 0x62, [@local, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x5, 0x0}, @remote]}, @generic={0x88, 0x8, "6866e7a4a903"}]}}}}}) 386.657918ms ago: executing program 3 (id=5052): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 337.111352ms ago: executing program 3 (id=5053): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0871dd61703eefe87ff070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741bbf5528a601b5934b867f39f7d776ac00a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd77779123b32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e471fc6b4d54803ad0adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54ef29dab9be13266cc24df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000940), 0x10}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x300, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb989"], 0xfdef) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) recvmsg(r10, &(0x7f0000000780)={&(0x7f0000000380)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/65, 0x41}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000540)=""/111, 0x6f}], 0x5, &(0x7f0000000680)=""/229, 0xe5}, 0x2000) sendfile(r2, r1, 0x0, 0x100800001) 34.904527ms ago: executing program 2 (id=5054): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0xa, &(0x7f0000000040), 0xffffffffffffffc7}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 22.530678ms ago: executing program 2 (id=5055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 11.257639ms ago: executing program 2 (id=5056): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@union={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x85039ff06886cae7, 0x2e, 0x5f]}}, 0x0, 0x2e}, 0x20) 0s ago: executing program 2 (id=5057): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): eady exists on: batadv_slave_1 [ 216.697111][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.706956][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.717405][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.727276][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.737811][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.747754][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.758265][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.768098][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.778573][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.790380][T14255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.802425][ T56] hsr_slave_0: left promiscuous mode [ 216.808200][ T56] hsr_slave_1: left promiscuous mode [ 216.814079][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.821625][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.830091][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.837526][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.847169][ T56] veth0_macvtap: left promiscuous mode [ 216.852772][ T56] veth1_vlan: left promiscuous mode [ 216.858063][ T56] veth0_vlan: left promiscuous mode [ 216.938643][ T56] team0 (unregistering): Port device team_slave_1 removed [ 216.951168][ T56] team0 (unregistering): Port device team_slave_0 removed [ 216.993157][T14255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.001982][T14255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.010794][T14255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.019596][T14255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.035023][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.042090][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.114529][T14378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3963'. [ 217.130762][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.222102][T14304] veth0_vlan: entered promiscuous mode [ 217.234532][T14304] veth1_vlan: entered promiscuous mode [ 217.248583][T14321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.251695][T14399] loop2: detected capacity change from 0 to 2048 [ 217.264278][T14399] FAT-fs (loop2): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿ" or missing value [ 217.279539][T14304] veth0_macvtap: entered promiscuous mode [ 217.286012][T14321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.297998][T14321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.306923][T14321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.318443][T14304] veth1_macvtap: entered promiscuous mode [ 217.346901][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.357410][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.367364][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.378039][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.387925][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.398449][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.408309][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.418749][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.428736][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.439475][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.449496][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.459927][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.469860][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.480312][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.492005][T14304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.508492][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.519208][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.529241][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.539869][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.550003][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.560690][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.570714][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.581182][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.591109][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.601658][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.611610][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.622048][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.631952][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.642380][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.655494][T14304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.667821][T14304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.676917][T14304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.685822][T14304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.694649][T14304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.734979][T14409] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4003'. [ 217.787777][T14321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.814864][T14321] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.845340][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.852492][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.864006][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.871119][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.893925][T14321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.904432][T14321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.975036][T14321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.989198][T14442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4015'. [ 218.247978][T14321] veth0_vlan: entered promiscuous mode [ 218.261109][T14321] veth1_vlan: entered promiscuous mode [ 218.282158][T14321] veth0_macvtap: entered promiscuous mode [ 218.290148][T14321] veth1_macvtap: entered promiscuous mode [ 218.305232][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.315955][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.325869][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.336423][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.346446][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.356976][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.366906][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.377424][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.387318][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.397756][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.407778][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.418379][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.428218][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.438716][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.448540][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.458994][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.569461][T14321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.614578][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.625161][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.635276][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.646043][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.656199][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.666862][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.676815][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.687271][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.697126][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.707709][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.717613][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.728071][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.737942][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.748478][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.758344][T14321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.768788][T14321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.781266][T14321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.792017][T14321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.800908][T14321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.809789][T14321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.818494][T14321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.918241][T14519] loop2: detected capacity change from 0 to 128 [ 219.073972][T14538] tmpfs: Bad value for 'mpol' [ 219.106896][T14549] loop4: detected capacity change from 0 to 128 [ 219.348863][T14582] tmpfs: Bad value for 'mpol' [ 219.364916][T14581] loop2: detected capacity change from 0 to 1024 [ 219.420498][T14586] loop3: detected capacity change from 0 to 128 [ 219.442387][T14581] EXT4-fs mount: 18 callbacks suppressed [ 219.442421][T14581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.554081][T14581] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 219.666226][T14255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.722115][T14606] vlan2: entered promiscuous mode [ 219.727200][T14606] batadv0: entered promiscuous mode [ 219.732687][T14606] vlan2: entered allmulticast mode [ 219.737798][T14606] batadv0: entered allmulticast mode [ 219.745233][T14606] batadv0: left allmulticast mode [ 219.750321][T14606] batadv0: left promiscuous mode [ 219.777425][T14614] loop4: detected capacity change from 0 to 128 [ 219.875856][T14623] loop3: detected capacity change from 0 to 1024 [ 219.886671][T14623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.913004][T14623] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 219.945716][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.952503][T14634] loop4: detected capacity change from 0 to 1024 [ 219.964362][T14634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.032657][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.126695][T14652] vlan2: entered promiscuous mode [ 220.131839][T14652] batadv0: entered promiscuous mode [ 220.137178][T14652] vlan2: entered allmulticast mode [ 220.142347][T14652] batadv0: entered allmulticast mode [ 220.142894][T14656] loop3: detected capacity change from 0 to 1024 [ 220.158027][T14652] batadv0: left allmulticast mode [ 220.163162][T14652] batadv0: left promiscuous mode [ 220.193049][T14656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.213444][T14656] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 220.246076][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.584785][T14693] tmpfs: Bad value for 'mpol' [ 220.701336][T14697] loop2: detected capacity change from 0 to 1024 [ 220.784918][T14697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.805360][T14697] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 220.825708][T14255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.002870][T14725] loop2: detected capacity change from 0 to 1024 [ 221.013268][T14725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.042204][T14255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.262240][T14753] 9pnet_fd: p9_fd_create_tcp (14753): problem connecting socket to 127.0.0.1 [ 221.283809][T14753] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 221.290429][T14753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.297929][T14753] vhci_hcd vhci_hcd.0: Device attached [ 221.308028][T14753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.334179][T14753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.356099][T14755] vlan2: entered promiscuous mode [ 221.361320][T14755] batadv0: entered promiscuous mode [ 221.366695][T14755] vlan2: entered allmulticast mode [ 221.371856][T14755] batadv0: entered allmulticast mode [ 221.372705][T14753] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 221.383783][T14753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.391327][T14753] vhci_hcd vhci_hcd.0: Device attached [ 221.391340][T14755] batadv0: left allmulticast mode [ 221.391392][T14755] batadv0: left promiscuous mode [ 221.400652][T14753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.416205][T14753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.427259][T14753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.436151][T14753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.445960][T14753] vhci_hcd vhci_hcd.0: port 0 already used [ 221.458067][T14770] vhci_hcd: connection closed [ 221.458211][ T2031] vhci_hcd: stop threads [ 221.467280][ T2031] vhci_hcd: release socket [ 221.471746][ T2031] vhci_hcd: disconnect device [ 221.476774][T14758] vhci_hcd: connection closed [ 221.482748][ T2031] vhci_hcd: stop threads [ 221.491815][ T2031] vhci_hcd: release socket [ 221.496248][ T2031] vhci_hcd: disconnect device [ 221.501072][ T24] vhci_hcd: vhci_device speed not set [ 221.627823][T14799] loop4: detected capacity change from 0 to 1024 [ 221.639928][T14799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.692167][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.723143][T14811] loop2: detected capacity change from 0 to 512 [ 221.734407][T14811] EXT4-fs: Ignoring removed nobh option [ 221.740099][T14811] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.742424][T14809] vlan2: entered promiscuous mode [ 221.751624][T14809] batadv0: entered promiscuous mode [ 221.756690][T14811] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 221.756864][T14809] vlan2: entered allmulticast mode [ 221.770143][T14811] EXT4-fs (loop2): can't mount with commit=4, fs mounted w/o journal [ 221.770501][T14809] batadv0: entered allmulticast mode [ 221.786308][T14809] batadv0: left allmulticast mode [ 221.791467][T14809] batadv0: left promiscuous mode [ 221.917657][T14826] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 221.960713][T14826] loop1: detected capacity change from 0 to 2048 [ 221.986586][T14826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.022385][T14104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.096455][T14849] loop2: detected capacity change from 0 to 512 [ 222.121512][T14849] EXT4-fs: Ignoring removed nobh option [ 222.127214][T14849] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.137227][T14849] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 222.148272][T14849] EXT4-fs (loop2): can't mount with commit=4, fs mounted w/o journal [ 222.161540][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4190'. [ 222.178703][T14866] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 222.211558][T14866] loop4: detected capacity change from 0 to 2048 [ 222.243872][T14871] loop1: detected capacity change from 0 to 512 [ 222.258694][T14871] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.269962][T14866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.290142][T14871] EXT4-fs error (device loop1): __ext4_iget:4906: inode #11: block 1: comm syz.1.4193: invalid block [ 222.307596][T14871] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4193: couldn't read orphan inode 11 (err -117) [ 222.329009][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.344354][T14871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.418166][T14104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.468227][T14883] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 222.498209][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4203'. [ 222.516965][T14903] loop4: detected capacity change from 0 to 512 [ 222.524911][T14903] EXT4-fs: Ignoring removed nobh option [ 222.530596][T14903] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.531651][T14906] loop2: detected capacity change from 0 to 512 [ 222.539504][T14903] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 222.545595][T14906] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.562331][T14903] EXT4-fs (loop4): can't mount with commit=4, fs mounted w/o journal [ 222.576263][T14906] EXT4-fs error (device loop2): __ext4_iget:4906: inode #11: block 1: comm syz.2.4208: invalid block [ 222.594909][T14906] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4208: couldn't read orphan inode 11 (err -117) [ 222.633548][T14906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.707234][T14255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.777798][T14924] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 222.926230][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4228'. [ 223.353441][T14971] loop2: detected capacity change from 0 to 8192 [ 223.379401][T14971] loop2: p1 p2 p3 p4 [ 223.383750][T14971] loop2: p1 start 51379968 is beyond EOD, truncated [ 223.390471][T14971] loop2: p2 start 4293394432 is beyond EOD, truncated [ 223.397329][T14971] loop2: p3 size 15991040 extends beyond EOD, truncated [ 223.413314][T14971] loop2: p4 size 50331648 extends beyond EOD, truncated [ 223.471384][T14988] loop4: detected capacity change from 0 to 128 [ 223.485644][T14988] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.499283][T14988] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.543991][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 223.544040][ T29] audit: type=1400 audit(1720554049.404:3073): avc: denied { getopt } for pid=15000 comm="syz.3.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.571743][ T29] audit: type=1400 audit(1720554049.424:3074): avc: denied { rename } for pid=14987 comm="syz.4.4244" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.654660][T14321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.711381][ T2031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.718036][T15015] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 223.763918][T15015] loop2: detected capacity change from 0 to 2048 [ 223.783368][ T2031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.819074][T15015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.821130][T15023] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 223.872900][ T2031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.875525][T15033] loop4: detected capacity change from 0 to 512 [ 223.885914][T14255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.894289][T15033] EXT4-fs: Ignoring removed i_version option [ 223.906714][T15033] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 1: comm syz.4.4258: invalid block [ 223.923254][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4259'. [ 223.929132][T15033] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4258: couldn't read orphan inode 11 (err -117) [ 223.935612][T14989] chnl_net:caif_netlink_parms(): no params data found [ 223.952167][T15033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.971442][T15033] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4258'. [ 223.988775][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.999378][ T2031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.024109][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.031251][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.038639][T14989] bridge_slave_0: entered allmulticast mode [ 224.049553][T14989] bridge_slave_0: entered promiscuous mode [ 224.062231][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.069376][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.076570][T14989] bridge_slave_1: entered allmulticast mode [ 224.087453][T14989] bridge_slave_1: entered promiscuous mode [ 224.117923][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.121246][T15048] 9pnet_fd: p9_fd_create_tcp (15048): problem connecting socket to 127.0.0.1 [ 224.129979][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4263'. [ 224.147510][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.163897][ T2031] bridge_slave_1: left allmulticast mode [ 224.169719][ T2031] bridge_slave_1: left promiscuous mode [ 224.175495][ T2031] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.182574][T15048] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 224.182601][T15048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.182704][T15048] vhci_hcd vhci_hcd.0: Device attached [ 224.205712][T15048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.207070][T15056] loop2: detected capacity change from 0 to 512 [ 224.216921][T15048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.233840][T15056] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.237907][ T2031] bridge_slave_0: left allmulticast mode [ 224.242609][T15056] EXT4-fs error (device loop2): __ext4_iget:4906: inode #11: block 1: comm syz.2.4265: invalid block [ 224.245963][ T2031] bridge_slave_0: left promiscuous mode [ 224.262538][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.264470][T15048] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 224.276379][T15048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.283844][T15048] vhci_hcd vhci_hcd.0: Device attached [ 224.289536][T15056] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4265: couldn't read orphan inode 11 (err -117) [ 224.295125][T15048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.304543][T15056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.324089][T15063] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 224.348258][T15063] loop4: detected capacity change from 0 to 2048 [ 224.357514][T15065] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.371724][T15048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.372546][T15063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.380633][T15048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.400673][ T35] vhci_hcd: vhci_device speed not set [ 224.415043][T15048] vhci_hcd vhci_hcd.0: port 0 already used [ 224.422141][T14255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.433690][T15058] vhci_hcd: connection closed [ 224.433806][T15053] vhci_hcd: connection closed [ 224.438591][ T36] vhci_hcd: stop threads [ 224.447773][ T36] vhci_hcd: release socket [ 224.452331][ T36] vhci_hcd: disconnect device [ 224.457577][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.458091][ T36] vhci_hcd: stop threads [ 224.470933][ T36] vhci_hcd: release socket [ 224.475357][ T36] vhci_hcd: disconnect device [ 224.478896][ T35] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 224.487471][ T35] usb 3-1: enqueue for inactive port 0 [ 224.493147][ T35] usb 3-1: enqueue for inactive port 0 [ 224.493346][ T2031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.498650][ T35] usb 3-1: enqueue for inactive port 0 [ 224.521775][T15071] loop2: detected capacity change from 0 to 128 [ 224.524422][T15021] syz.3.4250 (15021) used greatest stack depth: 9592 bytes left [ 224.531766][ T2031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.555406][ T2031] bond0 (unregistering): Released all slaves [ 224.565300][ T2031] bond1 (unregistering): Released all slaves [ 224.571545][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4272'. [ 224.599019][ T35] vhci_hcd: vhci_device speed not set [ 224.606610][T14989] team0: Port device team_slave_0 added [ 224.613742][T14989] team0: Port device team_slave_1 added [ 224.625019][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4274'. [ 224.643813][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.650842][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.676843][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.691265][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.698226][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.724298][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.757699][ T2031] hsr_slave_0: left promiscuous mode [ 224.770486][ T2031] hsr_slave_1: left promiscuous mode [ 224.779414][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.786868][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.806981][ T2031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.814577][ T2031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.824548][ T2031] veth1_macvtap: left promiscuous mode [ 224.830536][ T2031] veth0_macvtap: left promiscuous mode [ 224.836481][ T2031] veth1_vlan: left promiscuous mode [ 224.841834][ T2031] veth0_vlan: left promiscuous mode [ 224.902343][ T2031] pim6reg (unregistering): left allmulticast mode [ 224.953364][ T2031] team0 (unregistering): Port device team_slave_1 removed [ 224.966680][ T2031] team0 (unregistering): Port device team_slave_0 removed [ 225.022038][T14989] hsr_slave_0: entered promiscuous mode [ 225.028394][T14989] hsr_slave_1: entered promiscuous mode [ 225.125554][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4285'. [ 225.157962][T15110] loop3: detected capacity change from 0 to 1764 [ 225.284736][T15129] loop1: detected capacity change from 0 to 512 [ 225.293483][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4296'. [ 225.297311][T15129] EXT4-fs: Ignoring removed i_version option [ 225.312193][T15129] EXT4-fs error (device loop1): __ext4_iget:4906: inode #11: block 1: comm syz.1.4295: invalid block [ 225.323230][T15129] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4295: couldn't read orphan inode 11 (err -117) [ 225.336389][T15129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.386649][T15137] loop4: detected capacity change from 0 to 1024 [ 225.393505][T15137] EXT4-fs: Ignoring removed orlov option [ 225.399432][T15137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.436922][T14104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.437341][T15137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.448051][T14989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.473751][T15131] loop3: detected capacity change from 0 to 8192 [ 225.484260][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.493402][T14989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.503099][T14989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.511927][T14989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.529284][T15131] loop3: p1 p2 p3 p4 [ 225.533374][T15131] loop3: p1 start 51379968 is beyond EOD, truncated [ 225.540071][T15131] loop3: p2 start 4293394432 is beyond EOD, truncated [ 225.546902][T15131] loop3: p3 size 15991040 extends beyond EOD, truncated [ 225.576152][T15131] loop3: p4 size 50331648 extends beyond EOD, truncated [ 225.617135][T14989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.642126][T15147] 9pnet_fd: p9_fd_create_unix (15147): problem connecting socket: éq‰Y’3aK: -111 [ 225.644479][ T29] audit: type=1400 audit(1720554051.504:3075): avc: denied { mounton } for pid=15144 comm="syz.4.4300" path=2F37382FE91F7189591E9233614B dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 225.659904][T15151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=15151 comm=syz.1.4303 [ 225.679348][T14989] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.691643][T15147] sctp: [Deprecated]: syz.4.4300 (pid 15147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.691643][T15147] Use struct sctp_sack_info instead [ 225.701376][ T2749] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.718979][ T2749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.746947][ T820] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.754071][ T820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.795258][T14989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.813457][T15162] loop3: detected capacity change from 0 to 128 [ 225.854893][T15166] loop1: detected capacity change from 0 to 1764 [ 225.918252][T15180] dvmrp1: entered allmulticast mode [ 225.936385][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.948311][ T29] audit: type=1326 audit(1720554051.814:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15179 comm="syz.3.4315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x0 [ 225.986144][T15187] 9pnet_fd: p9_fd_create_unix (15187): problem connecting socket: éq‰Y’3aK: -111 [ 225.998145][T15187] sctp: [Deprecated]: syz.1.4317 (pid 15187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.998145][T15187] Use struct sctp_sack_info instead [ 226.008388][T15184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=15184 comm=syz.4.4316 [ 226.086679][T15204] loop2: detected capacity change from 0 to 128 [ 226.095511][T14989] veth0_vlan: entered promiscuous mode [ 226.109152][T14989] veth1_vlan: entered promiscuous mode [ 226.130133][T14989] veth0_macvtap: entered promiscuous mode [ 226.138360][T14989] veth1_macvtap: entered promiscuous mode [ 226.152337][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.162905][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.172946][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.178489][T15208] loop4: detected capacity change from 0 to 1764 [ 226.183535][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.199727][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.210242][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.220327][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.231096][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.241435][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.252168][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.262258][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.272769][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.272838][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.293177][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.303010][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.313572][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.326070][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.337297][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.347877][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.357785][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.368259][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.378081][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.388508][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.398446][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.409128][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.414838][T15219] loop1: detected capacity change from 0 to 764 [ 226.419119][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.435671][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.435690][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.435733][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.465925][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.476360][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.486177][T14989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.496597][T14989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.509514][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.517894][T14989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.526677][T14989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.535390][T14989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.544231][T14989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.634411][T15233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=15233 comm=syz.1.4329 [ 226.650113][T15228] 9pnet_fd: p9_fd_create_unix (15228): problem connecting socket: éq‰Y’3aK: -111 [ 226.662046][T15228] sctp: [Deprecated]: syz.2.4331 (pid 15228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.662046][T15228] Use struct sctp_sack_info instead [ 226.698179][T15240] loop1: detected capacity change from 0 to 512 [ 226.707162][T15240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.723990][T15240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.743633][T15240] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.778341][T15240] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4333: corrupted xattr block 32: bad e_name length [ 226.796808][T15240] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 226.806812][ T29] audit: type=1400 audit(1720554052.664:3077): avc: denied { rename } for pid=15239 comm="syz.1.4333" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.833603][T15240] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4333: corrupted xattr block 32: bad e_name length [ 226.868769][T15240] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 226.872417][T15252] loop3: detected capacity change from 0 to 1764 [ 226.877862][ T29] audit: type=1400 audit(1720554052.734:3078): avc: denied { unlink } for pid=15239 comm="syz.1.4333" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.914507][T15240] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.4333: failed to insert inode 16: doubly allocated? [ 226.944888][T14104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.948368][T15261] loop4: detected capacity change from 0 to 512 [ 226.993610][T15261] loop4: detected capacity change from 0 to 512 [ 227.003619][T15261] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.012727][T15261] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 227.050128][T15261] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 227.061452][T15261] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 227.078654][T15261] System zones: 0-2, 18-18, 34-34 [ 227.086805][T15261] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 227.103900][T15261] EXT4-fs (loop4): 1 truncate cleaned up [ 227.122900][T15261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.144268][T15278] loop3: detected capacity change from 0 to 512 [ 227.153387][T15261] EXT4-fs warning (device loop4): ext4_group_extend:1861: can't shrink FS - resize aborted [ 227.165153][T15278] EXT4-fs: Ignoring removed i_version option [ 227.174345][T15282] loop1: detected capacity change from 0 to 764 [ 227.180715][T15278] EXT4-fs error (device loop3): __ext4_iget:4906: inode #11: block 1: comm syz.3.4344: invalid block [ 227.180903][T15278] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4344: couldn't read orphan inode 11 (err -117) [ 227.204954][T15278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.245424][T15278] __nla_validate_parse: 8 callbacks suppressed [ 227.245438][T15278] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4344'. [ 227.305616][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.340860][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.431965][T15287] loop1: detected capacity change from 0 to 1024 [ 227.465416][T15287] EXT4-fs: Ignoring removed orlov option [ 227.471176][T15287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.517532][T15296] loop3: detected capacity change from 0 to 512 [ 227.530280][T15287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.546455][T15296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.567428][T14104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.580150][T15296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.594982][T15296] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.609175][T15303] 9pnet_fd: p9_fd_create_tcp (15303): problem connecting socket to 127.0.0.1 [ 227.621718][T15303] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 227.627920][T15308] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (134) [ 227.628260][T15303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.644987][T15303] vhci_hcd vhci_hcd.0: Device attached [ 227.651395][T15296] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.4352: corrupted xattr block 32: bad e_name length [ 227.666355][T15296] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 227.685840][T15296] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.4352: corrupted xattr block 32: bad e_name length [ 227.686967][T15303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.714352][T15303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.723686][T15296] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 227.732772][T15303] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 227.735255][T15315] netlink: 'syz.1.4357': attribute type 4 has an invalid length. [ 227.739437][T15303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.739518][T15303] vhci_hcd vhci_hcd.0: Device attached [ 227.740321][T15303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.776248][T15303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.791191][T15296] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.4352: failed to insert inode 16: doubly allocated? [ 227.811439][T15303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.829112][T15303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.845574][T15303] vhci_hcd vhci_hcd.0: port 0 already used [ 227.888983][ T820] vhci_hcd: vhci_device speed not set [ 227.917106][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.934856][T15305] vhci_hcd: connection closed [ 227.934946][T15319] vhci_hcd: connection closed [ 227.939849][ T67] vhci_hcd: stop threads [ 227.948915][ T67] vhci_hcd: release socket [ 227.953333][ T67] vhci_hcd: disconnect device [ 227.971271][ T67] vhci_hcd: stop threads [ 227.975562][ T67] vhci_hcd: release socket [ 227.980021][ T67] vhci_hcd: disconnect device [ 227.980803][ T820] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 227.997311][T15336] loop0: detected capacity change from 0 to 1024 [ 228.004281][ T820] usb 5-1: enqueue for inactive port 0 [ 228.015955][T15327] 9pnet_fd: p9_fd_create_unix (15327): problem connecting socket: éq‰Y’3aK: -111 [ 228.021854][ T820] usb 5-1: enqueue for inactive port 0 [ 228.036298][ T820] usb 5-1: enqueue for inactive port 0 [ 228.039511][T15327] sctp: [Deprecated]: syz.4.4360 (pid 15327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.039511][T15327] Use struct sctp_sack_info instead [ 228.066887][T15344] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (134) [ 228.077666][T15336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.120951][ T820] vhci_hcd: vhci_device speed not set [ 228.162904][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4371'. [ 228.179398][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.200197][T15358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=15358 comm=syz.4.4371 [ 228.230892][T15367] loop0: detected capacity change from 0 to 512 [ 228.234893][T15360] loop3: detected capacity change from 0 to 512 [ 228.243669][T15367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.245710][T15360] EXT4-fs: Ignoring removed oldalloc option [ 228.262849][T15360] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.4372: Parent and EA inode have the same ino 15 [ 228.275376][T15360] EXT4-fs (loop3): Remounting filesystem read-only [ 228.282044][T15360] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 228.292733][T15360] EXT4-fs (loop3): 1 orphan inode deleted [ 228.297098][T15367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.300499][T15360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.321290][T15367] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.323233][T15360] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 228.340966][T15360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.356049][T15367] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4373: corrupted xattr block 32: bad e_name length [ 228.374403][T15367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 228.396470][T15367] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4373: corrupted xattr block 32: bad e_name length [ 228.435369][T15367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 228.445550][ T29] audit: type=1326 audit(1720554054.314:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15374 comm="syz.3.4376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x0 [ 228.480716][T15367] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.4373: failed to insert inode 16: doubly allocated? [ 228.504399][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.604239][T15390] loop0: detected capacity change from 0 to 1024 [ 228.612135][T15390] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.612496][T15392] loop2: detected capacity change from 0 to 128 [ 228.631705][T15392] FAT-fs (loop2): bogus logical sector size 0 [ 228.634532][T15390] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 228.637807][T15392] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 228.646619][T15390] EXT4-fs (loop0): orphan cleanup on readonly fs [ 228.655139][T15392] FAT-fs (loop2): Can't find a valid FAT filesystem [ 228.668984][T15390] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.4382: Invalid inode table block 0 in block_group 0 [ 228.682174][T15390] EXT4-fs (loop0): Remounting filesystem read-only [ 228.688697][T15390] Quota error (device loop0): write_blk: dquota write failed [ 228.696124][T15390] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 228.707460][T15390] EXT4-fs (loop0): 1 truncate cleaned up [ 228.714033][T15390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.730393][T15390] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 228.733752][T15394] 9pnet_fd: p9_fd_create_unix (15394): problem connecting socket: éq‰Y’3aK: -111 [ 228.737506][T15390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.757391][T15394] sctp: [Deprecated]: syz.4.4379 (pid 15394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.757391][T15394] Use struct sctp_sack_info instead [ 228.762027][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4384'. [ 228.835230][T15390] loop0: detected capacity change from 0 to 1024 [ 228.846553][T15390] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 228.856567][T15390] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 228.867709][T15390] jbd2_journal_init_inode: Cannot locate journal superblock [ 228.875061][T15390] EXT4-fs (loop0): Could not load journal inode [ 228.890918][T15402] loop4: detected capacity change from 0 to 512 [ 228.897430][T15402] EXT4-fs: Ignoring removed oldalloc option [ 228.905898][T15402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4386: Parent and EA inode have the same ino 15 [ 228.918472][T15402] EXT4-fs (loop4): Remounting filesystem read-only [ 228.925085][T15402] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 228.926226][T15402] EXT4-fs (loop4): 1 orphan inode deleted [ 228.942385][T15402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.954599][T15402] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 228.962240][T15402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.013166][T15409] loop0: detected capacity change from 0 to 512 [ 229.021021][T15409] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.4388: Parent and EA inode have the same ino 15 [ 229.035761][T15409] EXT4-fs (loop0): 1 orphan inode deleted [ 229.042681][T15409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.058246][T15412] tmpfs: Bad value for 'size' [ 229.058684][T15409] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.4388: corrupted in-inode xattr: invalid ea_ino [ 229.063580][T15412] Invalid ELF header magic: != ELF [ 229.085381][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.110006][T15414] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.164501][T15422] loop0: detected capacity change from 0 to 512 [ 229.180201][T15424] loop4: detected capacity change from 0 to 1024 [ 229.186942][T15424] EXT4-fs: Ignoring removed oldalloc option [ 229.192947][T15424] EXT4-fs: Ignoring removed orlov option [ 229.201252][T15424] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 229.203852][T15422] loop0: detected capacity change from 0 to 512 [ 229.211651][T15424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.228992][T15422] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.238039][T15422] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 229.246259][ T29] audit: type=1400 audit(1720554055.094:3080): avc: denied { setopt } for pid=15423 comm="syz.4.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.280007][T15422] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 229.280491][T15428] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4396'. [ 229.298673][T15422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 229.312111][T15422] System zones: 0-2, 18-18, 34-34 [ 229.317574][T15422] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 229.331104][T14321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.344876][ T29] audit: type=1400 audit(1720554055.204:3081): avc: denied { getopt } for pid=15429 comm="syz.1.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.364637][T15422] EXT4-fs (loop0): 1 truncate cleaned up [ 229.375080][T15422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.395631][T15422] EXT4-fs warning (device loop0): ext4_group_extend:1861: can't shrink FS - resize aborted [ 229.419778][T14989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.429768][T15432] loop1: detected capacity change from 0 to 1024 [ 229.445099][T15432] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.459094][T15432] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 229.475699][T15432] EXT4-fs (loop1): orphan cleanup on readonly fs [ 229.484682][T15432] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.4399: Invalid inode table block 0 in block_group 0 [ 229.499403][T15432] EXT4-fs (loop1): Remounting filesystem read-only [ 229.506029][T15432] Quota error (device loop1): write_blk: dquota write failed [ 229.513492][T15432] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 229.528190][T15432] EXT4-fs (loop1): 1 truncate cleaned up [ 229.534652][T15432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.547578][T15432] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 229.554447][T15432] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.564668][ T29] audit: type=1326 audit(1720554055.434:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.0.4400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12e06b8bd9 code=0x0 [ 229.650487][T15432] loop1: detected capacity change from 0 to 1024 [ 229.658792][T15432] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 229.668538][T15432] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 229.696865][T15432] jbd2_journal_init_inode: Cannot locate journal superblock [ 229.704427][T15432] EXT4-fs (loop1): Could not load journal inode [ 230.070755][T15490] cgroup: none used incorrectly [ 230.145511][T15519] loop1: detected capacity change from 0 to 512 [ 230.175080][T15519] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.4413: Parent and EA inode have the same ino 15 [ 230.204292][T15523] loop2: detected capacity change from 0 to 128 [ 230.220917][T15523] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.260574][T15519] EXT4-fs (loop1): 1 orphan inode deleted [ 230.279539][T15519] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.4413: corrupted in-inode xattr: invalid ea_ino [ 230.305149][T15523] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.390816][T15554] loop0: detected capacity change from 0 to 128 [ 230.519227][T15592] loop4: detected capacity change from 0 to 128 [ 230.562817][T15592] FAT-fs (loop4): bogus logical sector size 0 [ 230.565322][T15588] loop0: detected capacity change from 0 to 1024 [ 230.568991][T15592] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 230.584681][T15592] FAT-fs (loop4): Can't find a valid FAT filesystem [ 230.623249][T15588] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.642872][T15588] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 230.670703][T15588] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.677775][T15610] loop1: detected capacity change from 0 to 512 [ 230.678250][T15588] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.4418: Invalid inode table block 0 in block_group 0 [ 230.698781][T15588] EXT4-fs (loop0): Remounting filesystem read-only [ 230.705350][T15588] Quota error (device loop0): write_blk: dquota write failed [ 230.712804][T15588] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 230.727511][T15588] EXT4-fs (loop0): 1 truncate cleaned up [ 230.737982][T15588] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 230.754012][T15610] loop1: detected capacity change from 0 to 512 [ 230.773942][T15610] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.783238][T15610] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 230.808236][T15610] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 230.815648][T15588] loop0: detected capacity change from 0 to 1024 [ 230.832204][T15610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 230.842289][T15610] System zones: 0-2, 18-18, 34-34 [ 230.852541][T15588] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 230.862443][T15610] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 230.871760][T15622] program syz.4.4426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.877125][T15588] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 230.897395][T15610] EXT4-fs (loop1): 1 truncate cleaned up [ 230.912441][T15588] jbd2_journal_init_inode: Cannot locate journal superblock [ 230.919926][T15588] EXT4-fs (loop0): Could not load journal inode [ 230.927986][T15610] EXT4-fs warning (device loop1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 231.044969][T15650] loop3: detected capacity change from 0 to 128 [ 231.063890][T15653] loop0: detected capacity change from 0 to 512 [ 231.104296][T15653] loop0: detected capacity change from 0 to 512 [ 231.129072][T15653] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.138380][T15653] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 231.150076][T15658] cgroup: none used incorrectly [ 231.158377][T15653] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 231.183474][T15653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 231.196005][T15653] System zones: 0-2, 18-18, 34-34 [ 231.209005][T15653] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 231.241299][T15685] loop4: detected capacity change from 0 to 128 [ 231.254998][T15653] EXT4-fs (loop0): 1 truncate cleaned up [ 231.282839][T15653] EXT4-fs warning (device loop0): ext4_group_extend:1861: can't shrink FS - resize aborted [ 231.357055][T15704] loop0: detected capacity change from 0 to 128 [ 231.461234][T15718] loop4: detected capacity change from 0 to 128 [ 231.488010][T15722] loop2: detected capacity change from 0 to 512 [ 231.530497][T15722] loop2: detected capacity change from 0 to 512 [ 231.550141][T15722] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.559245][T15722] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 231.606566][T15722] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 231.636327][T15722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 231.645669][T15722] System zones: 0-2, 18-18, 34-34 [ 231.654162][T15722] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 231.694058][T15722] EXT4-fs (loop2): 1 truncate cleaned up [ 231.701669][T15739] program syz.0.4474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.712560][T15722] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 231.762968][T15746] loop4: detected capacity change from 0 to 128 [ 231.808317][T15748] loop0: detected capacity change from 0 to 512 [ 231.825656][T15748] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.835626][T15748] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 231.906411][T15760] loop4: detected capacity change from 0 to 128 [ 231.985050][T15764] loop1: detected capacity change from 0 to 512 [ 231.995661][T15764] EXT4-fs: Ignoring removed oldalloc option [ 232.007204][T15764] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.4486: Parent and EA inode have the same ino 15 [ 232.021777][T15764] EXT4-fs (loop1): Remounting filesystem read-only [ 232.028370][T15764] EXT4-fs warning (device loop1): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 232.048421][T15764] EXT4-fs (loop1): 1 orphan inode deleted [ 232.055494][T15764] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 232.071700][T15772] loop4: detected capacity change from 0 to 512 [ 232.096736][T15776] loop0: detected capacity change from 0 to 512 [ 232.103200][T15772] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.120203][T15772] EXT4-fs error (device loop4): ext4_quota_enable:7030: comm syz.4.4487: Bad quota inum: 2147483647, type: 1 [ 232.134053][T15772] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=2147483647). Please run e2fsck to fix. [ 232.139426][T15776] loop0: detected capacity change from 0 to 512 [ 232.151841][T15772] EXT4-fs (loop4): mount failed [ 232.169121][T15776] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.178306][T15776] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 232.195222][T15776] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 232.208905][T15776] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 232.228863][T15776] System zones: 0-2, 18-18, 34-34 [ 232.235791][T15776] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 232.259087][T15776] EXT4-fs (loop0): 1 truncate cleaned up [ 232.277435][T15785] loop3: detected capacity change from 0 to 512 [ 232.285892][T15776] EXT4-fs warning (device loop0): ext4_group_extend:1861: can't shrink FS - resize aborted [ 232.305752][T15785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.365451][T15785] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.380441][T15789] loop4: detected capacity change from 0 to 512 [ 232.387572][T15785] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.4492: corrupted xattr block 32: bad e_name length [ 232.407419][T15789] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 232.417407][T15789] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 232.428682][T15785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 232.442249][T15800] macsec0: entered promiscuous mode [ 232.443861][T15785] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.4492: corrupted xattr block 32: bad e_name length [ 232.473788][T15785] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 232.491397][T15800] ------------[ cut here ]------------ [ 232.496889][T15800] Please remove unsupported % in format string [ 232.504333][T15800] WARNING: CPU: 1 PID: 15800 at lib/vsprintf.c:2680 format_decode+0x87f/0x8a0 [ 232.513359][T15800] Modules linked in: [ 232.517265][T15800] CPU: 1 PID: 15800 Comm: syz.0.4496 Tainted: G W 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 232.521896][T15785] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.4492: failed to insert inode 16: doubly allocated? [ 232.528914][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 232.528931][T15800] RIP: 0010:format_decode+0x87f/0x8a0 [ 232.556730][T15800] Code: 9b 4f 86 e8 f3 ea 4f fc c6 05 bd 36 59 01 01 90 4c 89 ef e8 53 e9 4f fc 41 0f b6 75 00 48 c7 c7 1c ab e5 85 e8 c2 95 1a fc 90 <0f> 0b 90 90 4c 89 ff e8 45 f7 4f fc 4d 8b 27 e9 a3 fe ff ff e8 68 [ 232.576386][T15800] RSP: 0018:ffffc900013e79a0 EFLAGS: 00010246 [ 232.582490][T15800] RAX: 6089f2a8a482c600 RBX: ffff00ffffffffff RCX: 0000000000040000 [ 232.590510][T15800] RDX: ffffc900026a2000 RSI: 00000000000013f8 RDI: 00000000000013f9 [ 232.598515][T15800] RBP: 0000000000000000 R08: ffffffff8110fbd7 R09: 0000000000000000 [ 232.606526][T15800] R10: 0001ffffffffffff R11: ffff888102f46300 R12: ffff0a00ffffff00 [ 232.614566][T15800] R13: ffffc900013e7bfc R14: ffff0000ffffff00 R15: ffffc900013e7a28 [ 232.622706][T15800] FS: 00007f12df93a6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 232.631670][T15800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.638305][T15800] CR2: 0000000020003008 CR3: 00000001254ba000 CR4: 00000000003506f0 [ 232.646330][T15800] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.654316][T15800] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 232.662389][T15800] Call Trace: [ 232.665664][T15800] [ 232.668587][T15800] ? __warn+0x13c/0x350 [ 232.672768][T15800] ? report_bug+0x315/0x420 [ 232.677354][T15800] ? format_decode+0x87f/0x8a0 [ 232.682142][T15800] ? handle_bug+0x3e/0x70 [ 232.686545][T15800] ? exc_invalid_op+0x1a/0x50 [ 232.691239][T15800] ? asm_exc_invalid_op+0x1a/0x20 [ 232.696333][T15800] ? __warn_printk+0x167/0x1b0 [ 232.701150][T15800] ? format_decode+0x87f/0x8a0 [ 232.705916][T15800] bstr_printf+0xb5/0x9e0 [ 232.710364][T15800] bpf_trace_printk+0xba/0x1d0 [ 232.715157][T15800] ? __pfx_bpf_trace_printk+0x10/0x10 [ 232.720617][T15800] ___bpf_prog_run+0x9ab/0x46c0 [ 232.725469][T15800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.731610][T15800] ? arch_stack_walk+0x16d/0x1b0 [ 232.736553][T15800] __bpf_prog_run32+0x74/0xa0 [ 232.741245][T15800] bpf_test_run+0x17d/0x430 [ 232.745752][T15800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.751829][T15800] ? should_fail_ex+0x31/0x230 [ 232.756618][T15800] ? bpf_test_run+0xf1/0x430 [ 232.761228][T15800] bpf_prog_test_run_skb+0x73c/0x9b0 [ 232.766520][T15800] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 232.772356][T15800] bpf_prog_test_run+0x26d/0x3e0 [ 232.777301][T15800] __sys_bpf+0x400/0x7a0 [ 232.781694][T15800] __x64_sys_bpf+0x43/0x50 [ 232.786141][T15800] x64_sys_call+0x2655/0x2d70 [ 232.790932][T15800] do_syscall_64+0xc9/0x1c0 [ 232.795464][T15800] ? clear_bhb_loop+0x55/0xb0 [ 232.800192][T15800] ? clear_bhb_loop+0x55/0xb0 [ 232.804900][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.810858][T15800] RIP: 0033:0x7f12e06b8bd9 [ 232.815267][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.834958][T15800] RSP: 002b:00007f12df93a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.843488][T15800] RAX: ffffffffffffffda RBX: 00007f12e0846f60 RCX: 00007f12e06b8bd9 [ 232.851467][T15800] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 232.859473][T15800] RBP: 00007f12e0727e60 R08: 0000000000000000 R09: 0000000000000000 [ 232.867446][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.875472][T15800] R13: 000000000000000b R14: 00007f12e0846f60 R15: 00007ffcced726b8 [ 232.883546][T15800] [ 232.886561][T15800] ---[ end trace 0000000000000000 ]--- [ 232.916172][T15799] macsec0: left promiscuous mode [ 233.000665][T15831] netlink: 'syz.0.4508': attribute type 5 has an invalid length. [ 233.026825][ T29] audit: type=1326 audit(1720554058.884:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15835 comm="syz.3.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x7ffc0000 [ 233.288080][T15857] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4517'. [ 233.516168][T15862] loop0: detected capacity change from 0 to 512 [ 233.523003][T15862] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.540109][T15862] EXT4-fs error (device loop0): ext4_quota_enable:7030: comm syz.0.4519: Bad quota inum: 2147483647, type: 1 [ 233.552163][T15862] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=2147483647). Please run e2fsck to fix. [ 233.567889][T15862] EXT4-fs (loop0): mount failed [ 233.663322][T15867] program syz.0.4520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.707289][T15871] loop0: detected capacity change from 0 to 764 [ 233.849033][T15885] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 233.915940][T15890] loop0: detected capacity change from 0 to 512 [ 233.939683][T15890] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.979545][T15890] EXT4-fs error (device loop0): ext4_quota_enable:7030: comm syz.0.4531: Bad quota inum: 2147483647, type: 1 [ 234.019006][T15890] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=2147483647). Please run e2fsck to fix. [ 234.070905][T15890] EXT4-fs (loop0): mount failed [ 234.118888][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 234.118906][ T29] audit: type=1400 audit(1720554059.974:3120): avc: denied { name_bind } for pid=15899 comm="syz.2.4535" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 234.307354][T15913] loop0: detected capacity change from 0 to 512 [ 234.318259][T15913] EXT4-fs (loop0): unsupported inode size: 0 [ 234.324381][T15913] EXT4-fs (loop0): blocksize: 1024 [ 234.374467][T15919] loop4: detected capacity change from 0 to 512 [ 234.394869][T15919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.404885][T15919] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 234.439931][T15921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4542'. [ 234.449025][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4542'. [ 234.482761][ T29] audit: type=1326 audit(1720554060.344:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4787c99bd9 code=0x7ffc0000 [ 234.506376][ T29] audit: type=1326 audit(1720554060.344:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4787c99bd9 code=0x7ffc0000 [ 234.530071][ T29] audit: type=1326 audit(1720554060.344:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4787c99bd9 code=0x7ffc0000 [ 234.553580][ T29] audit: type=1326 audit(1720554060.344:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4787c99bd9 code=0x7ffc0000 [ 234.578107][ T29] audit: type=1326 audit(1720554060.434:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4787c99bd9 code=0x7ffc0000 [ 234.601819][ T29] audit: type=1326 audit(1720554060.434:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4787c99bd9 code=0x7ffc0000 [ 234.625644][ T29] audit: type=1326 audit(1720554060.434:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4787c90c27 code=0x7ffc0000 [ 234.645860][T15927] loop0: detected capacity change from 0 to 128 [ 234.649123][ T29] audit: type=1326 audit(1720554060.434:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4787c355c9 code=0x7ffc0000 [ 234.679032][ T29] audit: type=1326 audit(1720554060.434:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.1.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4787c90c27 code=0x7ffc0000 [ 234.708614][T15927] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.783980][T15925] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.902314][T15963] loop3: detected capacity change from 0 to 512 [ 234.921251][T15963] EXT4-fs (loop3): unsupported inode size: 0 [ 234.927348][T15963] EXT4-fs (loop3): blocksize: 1024 [ 235.100180][T15973] loop2: detected capacity change from 0 to 2048 [ 235.210565][ T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.215270][T16000] loop3: detected capacity change from 0 to 256 [ 235.225400][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 235.243837][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 235.243837][ T28] [ 235.253507][ T28] EXT4-fs (loop2): Total free blocks count 0 [ 235.259594][ T28] EXT4-fs (loop2): Free/Dirty block details [ 235.260008][T16000] FAT-fs (loop3): Directory bread(block 64) failed [ 235.265480][ T28] EXT4-fs (loop2): free_blocks=2415919104 [ 235.265496][ T28] EXT4-fs (loop2): dirty_blocks=16 [ 235.265508][ T28] EXT4-fs (loop2): Block reservation details [ 235.281165][T16000] FAT-fs (loop3): Directory bread(block 65) failed [ 235.282848][ T28] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 235.301224][T16000] FAT-fs (loop3): Directory bread(block 66) failed [ 235.309516][T16000] FAT-fs (loop3): Directory bread(block 67) failed [ 235.316209][T16000] FAT-fs (loop3): Directory bread(block 68) failed [ 235.322986][T16000] FAT-fs (loop3): Directory bread(block 69) failed [ 235.330203][T16000] FAT-fs (loop3): Directory bread(block 70) failed [ 235.337033][T16000] FAT-fs (loop3): Directory bread(block 71) failed [ 235.343989][T16000] FAT-fs (loop3): Directory bread(block 72) failed [ 235.352222][T16000] FAT-fs (loop3): Directory bread(block 73) failed [ 235.432222][T16008] syz.3.4576: attempt to access beyond end of device [ 235.432222][T16008] loop3: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 235.451728][T16008] syz.3.4576: attempt to access beyond end of device [ 235.451728][T16008] loop3: rw=2049, sector=1352, nr_sectors = 88 limit=256 [ 235.567283][T16017] netlink: 'syz.2.4581': attribute type 10 has an invalid length. [ 235.596693][T16017] team0: Port device dummy0 added [ 235.714782][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4579'. [ 235.763133][T16015] loop0: detected capacity change from 0 to 128 [ 236.057681][ T8291] kworker/u8:8: attempt to access beyond end of device [ 236.057681][ T8291] loop3: rw=1, sector=1440, nr_sectors = 8 limit=256 [ 236.082840][T16033] loop4: detected capacity change from 0 to 2048 [ 236.156594][ T8291] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.172468][ T8291] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 236.184774][ T8291] EXT4-fs (loop4): This should not happen!! Data will be lost [ 236.184774][ T8291] [ 236.194458][ T8291] EXT4-fs (loop4): Total free blocks count 0 [ 236.200579][ T8291] EXT4-fs (loop4): Free/Dirty block details [ 236.206479][ T8291] EXT4-fs (loop4): free_blocks=2415919104 [ 236.212278][ T8291] EXT4-fs (loop4): dirty_blocks=16 [ 236.217494][ T8291] EXT4-fs (loop4): Block reservation details [ 236.223512][ T8291] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 236.244962][T16042] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 236.274916][T16042] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 236.314559][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 236.345672][T16059] loop4: detected capacity change from 0 to 764 [ 236.387629][T16061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16061 comm=syz.0.4590 [ 236.483452][T16063] loop2: detected capacity change from 0 to 2048 [ 236.598668][T16071] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4601'. [ 236.617892][ T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.636823][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 236.649216][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 236.649216][ T28] [ 236.658986][ T28] EXT4-fs (loop2): Total free blocks count 0 [ 236.665141][ T28] EXT4-fs (loop2): Free/Dirty block details [ 236.671285][ T28] EXT4-fs (loop2): free_blocks=2415919104 [ 236.677115][ T28] EXT4-fs (loop2): dirty_blocks=16 [ 236.682329][ T28] EXT4-fs (loop2): Block reservation details [ 236.688313][ T28] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 236.893381][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'. [ 237.009572][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 237.073732][T16097] loop2: detected capacity change from 0 to 1024 [ 237.224358][T16109] delete_channel: no stack [ 237.386867][T16128] loop1: detected capacity change from 0 to 1024 [ 237.400737][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4622'. [ 237.464465][T16140] delete_channel: no stack [ 237.594989][T16152] loop1: detected capacity change from 0 to 128 [ 237.625334][T16152] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 237.633225][T16152] FAT-fs (loop1): Filesystem has been set read-only [ 237.648958][T16152] syz.1.4630: attempt to access beyond end of device [ 237.648958][T16152] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 237.664855][T16158] loop2: detected capacity change from 0 to 256 [ 238.435869][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 238.466844][T16181] ipvlan2: entered allmulticast mode [ 238.472243][T16181] veth0_vlan: entered allmulticast mode [ 238.608398][T16189] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 238.633150][T16192] loop0: detected capacity change from 0 to 256 [ 238.650327][T16193] loop3: detected capacity change from 0 to 2048 [ 238.675493][T16197] loop4: detected capacity change from 0 to 1024 [ 238.776120][ T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.813035][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 238.825354][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 238.825354][ T11] [ 238.835306][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 238.841563][ T11] EXT4-fs (loop3): Free/Dirty block details [ 238.847470][ T11] EXT4-fs (loop3): free_blocks=2415919104 [ 238.853222][ T11] EXT4-fs (loop3): dirty_blocks=16 [ 238.858434][ T11] EXT4-fs (loop3): Block reservation details [ 238.864430][ T11] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 238.907754][T16218] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 239.004723][T16227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 239.027591][T16232] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4664'. [ 239.052438][T16216] block device autoloading is deprecated and will be removed. [ 239.186082][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 239.186175][ T29] audit: type=1326 audit(1720554065.044:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.3.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x7ffc0000 [ 239.216084][ T29] audit: type=1326 audit(1720554065.044:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.3.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x7ffc0000 [ 239.240843][ T29] audit: type=1326 audit(1720554065.104:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.3.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29cfd2fbd9 code=0x7ffc0000 [ 239.288665][ T29] audit: type=1326 audit(1720554065.144:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.3.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x7ffc0000 [ 239.312303][ T29] audit: type=1326 audit(1720554065.144:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.3.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cfd2fbd9 code=0x7ffc0000 [ 239.379077][T16252] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 239.441384][T16259] loop3: detected capacity change from 0 to 1024 [ 239.452699][T16259] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 239.485261][ T29] audit: type=1400 audit(1720554065.344:3542): avc: denied { ioctl } for pid=16266 comm="syz.1.4679" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.534407][T16271] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4681'. [ 239.617628][T16283] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 239.674530][T16287] netlink: 'syz.1.4687': attribute type 4 has an invalid length. [ 239.711557][T16287] netlink: 'syz.1.4687': attribute type 17 has an invalid length. [ 239.811266][T16294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4692'. [ 239.838169][T16298] netlink: 'syz.1.4693': attribute type 32 has an invalid length. [ 239.846045][T16298] netlink: 'syz.1.4693': attribute type 1 has an invalid length. [ 239.871122][T16298] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 239.886675][T16303] loop0: detected capacity change from 0 to 128 [ 239.920898][T16308] loop4: detected capacity change from 0 to 1024 [ 239.935986][T16308] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 239.935986][T16308] [ 239.946754][T16308] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 240.005277][T16308] bridge0: entered promiscuous mode [ 240.013143][T16308] bridge0: left promiscuous mode [ 240.195457][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 240.244400][T16338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4708'. [ 240.244680][T16312] loop3: detected capacity change from 0 to 128 [ 240.353310][T16342] loop1: detected capacity change from 0 to 128 [ 240.377908][T16342] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.429976][T16342] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 240.441032][T16352] loop2: detected capacity change from 0 to 128 [ 240.689735][ T29] audit: type=1326 audit(1720554066.544:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.2.4715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9607a0bd9 code=0x0 [ 240.820814][T16366] loop1: detected capacity change from 0 to 512 [ 240.837294][T16366] EXT4-fs: Invalid want_extra_isize 1958 [ 241.013857][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4722'. [ 241.031265][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4720'. [ 241.091421][T16386] xt_nfacct: accounting object `syz0' does not exists [ 241.513589][T16394] netlink: 'syz.2.4727': attribute type 10 has an invalid length. [ 241.542363][T16394] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 241.614681][T16396] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4728'. [ 241.831677][T16400] loop4: detected capacity change from 0 to 512 [ 241.848722][T16400] EXT4-fs: Invalid want_extra_isize 1958 [ 241.948374][ T29] audit: type=1400 audit(1720554067.804:3544): avc: denied { setattr } for pid=16406 comm="syz.0.4733" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 242.133390][T16414] futex_wake_op: syz.0.4735 tries to shift op by -1; fix this program [ 242.742369][T16427] xt_nfacct: accounting object `syz0' does not exists [ 242.793923][T16429] loop1: detected capacity change from 0 to 1024 [ 242.824031][T16429] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 242.824031][T16429] [ 242.834794][T16429] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 242.910782][T16429] bridge0: entered promiscuous mode [ 242.932967][T16429] bridge0: left promiscuous mode [ 242.983806][ T29] audit: type=1400 audit(1720554068.844:3545): avc: denied { create } for pid=16435 comm="syz.4.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 243.004318][ T29] audit: type=1400 audit(1720554068.844:3546): avc: denied { create } for pid=16435 comm="syz.4.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.227244][T16453] xt_nfacct: accounting object `syz0' does not exists [ 243.501900][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4754'. [ 243.559936][T16467] syzkaller0: entered promiscuous mode [ 243.565441][T16467] syzkaller0: entered allmulticast mode [ 243.858245][T16497] syzkaller0: entered promiscuous mode [ 243.863793][T16497] syzkaller0: entered allmulticast mode [ 244.098508][T16545] netlink: 'syz.0.4788': attribute type 2 has an invalid length. [ 244.106532][T16545] netlink: 'syz.0.4788': attribute type 1 has an invalid length. [ 244.291898][T16580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4805'. [ 244.508791][T16617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4818'. [ 244.517151][T16615] loop0: detected capacity change from 0 to 2048 [ 244.532447][T16615] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.602118][T16633] loop4: detected capacity change from 0 to 512 [ 244.622947][T16633] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.651867][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 244.651909][ T29] audit: type=1326 audit(1720554070.514:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.4.4825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x0 [ 244.722379][T16641] syzkaller0: entered promiscuous mode [ 244.727855][T16641] syzkaller0: entered allmulticast mode [ 244.750069][T16645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4829'. [ 244.938232][T16667] delete_channel: no stack [ 245.026056][T16676] syzkaller0: entered promiscuous mode [ 245.031675][T16676] syzkaller0: entered allmulticast mode [ 245.140324][ T29] audit: type=1400 audit(1720554071.004:3550): avc: denied { setopt } for pid=16687 comm="syz.2.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.175764][T16689] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=16689 comm=syz.2.4849 [ 245.223648][T16694] delete_channel: no stack [ 245.349704][T16710] vlan2: entered promiscuous mode [ 245.354759][T16710] team0: entered promiscuous mode [ 245.359853][T16710] team_slave_0: entered promiscuous mode [ 245.365607][T16710] team_slave_1: entered promiscuous mode [ 245.375611][T16710] team0: left promiscuous mode [ 245.380522][T16710] team_slave_0: left promiscuous mode [ 245.386006][T16710] team_slave_1: left promiscuous mode [ 245.517449][ T29] audit: type=1326 audit(1720554071.374:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.541239][ T29] audit: type=1326 audit(1720554071.374:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.564764][ T29] audit: type=1326 audit(1720554071.374:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.569455][T15589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.588264][ T29] audit: type=1326 audit(1720554071.374:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.622104][ T29] audit: type=1326 audit(1720554071.374:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.706715][ T29] audit: type=1326 audit(1720554071.464:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.730536][ T29] audit: type=1326 audit(1720554071.464:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.754111][ T29] audit: type=1326 audit(1720554071.464:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.4864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b5705bd9 code=0x7ffc0000 [ 245.849390][T15589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.898304][T16714] chnl_net:caif_netlink_parms(): no params data found [ 245.971096][T15589] bond0: (slave netdevsim1): Releasing backup interface [ 245.987605][T15589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.068496][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.075747][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.100824][T16714] bridge_slave_0: entered allmulticast mode [ 246.110247][T16714] bridge_slave_0: entered promiscuous mode [ 246.119622][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.126820][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.135378][T16714] bridge_slave_1: entered allmulticast mode [ 246.142688][T16714] bridge_slave_1: entered promiscuous mode [ 246.154583][T15589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.171272][T16778] loop4: detected capacity change from 0 to 2048 [ 246.187040][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.198236][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.220567][T16714] team0: Port device team_slave_0 added [ 246.227399][T16714] team0: Port device team_slave_1 added [ 246.256432][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.263494][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.289944][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.304026][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.311103][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.337156][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.369778][T15589] bridge_slave_1: left allmulticast mode [ 246.375464][T15589] bridge_slave_1: left promiscuous mode [ 246.381244][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.389284][T15589] bridge_slave_0: left allmulticast mode [ 246.394964][T15589] bridge_slave_0: left promiscuous mode [ 246.400722][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.453253][T16802] loop4: detected capacity change from 0 to 2048 [ 246.464044][T16804] loop1: detected capacity change from 0 to 256 [ 246.515330][T15589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.525894][T16808] loop4: detected capacity change from 0 to 256 [ 246.532552][T15589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.532893][T16808] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.553497][T16808] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.568119][T15589] bond0 (unregistering): Released all slaves [ 246.608244][T16714] hsr_slave_0: entered promiscuous mode [ 246.617518][T16812] loop0: detected capacity change from 0 to 512 [ 246.624709][T16714] hsr_slave_1: entered promiscuous mode [ 246.625661][T16812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 246.638298][T16714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.638345][T16812] System zones: 1-12 [ 246.647665][T16714] Cannot create hsr debugfs directory [ 246.650682][T16812] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.4899: corrupted in-inode xattr: e_value size too large [ 246.670126][T16812] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.4899: couldn't read orphan inode 15 (err -117) [ 246.726409][T15589] hsr_slave_0: left promiscuous mode [ 246.732475][T15589] hsr_slave_1: left promiscuous mode [ 246.738337][T15589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.745960][T15589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.754188][T15589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.761709][T15589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.771316][T15589] veth1_macvtap: left promiscuous mode [ 246.776937][T15589] veth0_macvtap: left promiscuous mode [ 246.782587][T15589] veth1_vlan: left promiscuous mode [ 246.787873][T15589] veth0_vlan: left promiscuous mode [ 246.875744][T15589] team0 (unregistering): Port device team_slave_1 removed [ 246.888023][T15589] team0 (unregistering): Port device team_slave_0 removed [ 246.925946][T15589] team0 (unregistering): Port device dummy0 removed [ 247.052529][T16838] ref_ctr_offset mismatch. inode: 0x278 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 247.105966][T16844] loop0: detected capacity change from 0 to 4096 [ 247.222672][T16714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.231814][T16714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.240312][T16714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.252826][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4911'. [ 247.262656][T16714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.287322][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4911'. [ 247.336429][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.469573][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.522953][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.525056][T16854] loop3: detected capacity change from 0 to 256 [ 247.530086][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.545977][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.553039][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.577230][T16714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.587670][T16714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.595174][T16857] loop4: detected capacity change from 0 to 512 [ 247.616674][T16857] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.4915: bad orphan inode 15 [ 247.627533][T16857] ext4_test_bit(bit=14, block=5) = 0 [ 247.668739][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.767729][T16714] veth0_vlan: entered promiscuous mode [ 247.777035][T16714] veth1_vlan: entered promiscuous mode [ 247.787087][T16879] loop3: detected capacity change from 0 to 512 [ 247.797794][T16714] veth0_macvtap: entered promiscuous mode [ 247.802952][T16879] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.806268][T16714] veth1_macvtap: entered promiscuous mode [ 247.827068][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.837627][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.847552][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.857979][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.867785][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.878315][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.888208][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.898657][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.908673][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.919240][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.929100][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.939587][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.949508][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.959932][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.969788][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.980225][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.992157][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.015934][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.026588][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.036445][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.042853][T16887] loop1: detected capacity change from 0 to 512 [ 248.046953][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.056644][T16887] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.4923: iget: bad extended attribute block 1 [ 248.063102][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.075627][T16887] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4923: couldn't read orphan inode 15 (err -117) [ 248.086013][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.107733][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.118230][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.128112][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.138769][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.148621][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.159127][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.169084][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.179632][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.189462][T16714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.199935][T16714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.212557][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.223800][T16714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.232571][T16714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.241374][T16714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.250117][T16714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.292421][T16891] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.304617][T16891] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 248.316673][T16891] bridge_slave_0: default FDB implementation only supports local addresses [ 248.339731][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.368911][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4929'. [ 248.378678][T16900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=16900 comm=syz.2.4929 [ 248.392715][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4929'. [ 248.420417][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.475106][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.537234][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.663356][T16930] loop1: detected capacity change from 0 to 1024 [ 248.677151][T16930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.684111][ T11] bridge_slave_1: left allmulticast mode [ 248.690064][ T11] bridge_slave_1: left promiscuous mode [ 248.695776][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.705450][T16930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 248.714397][ T11] bridge_slave_0: left allmulticast mode [ 248.720262][ T11] bridge_slave_0: left promiscuous mode [ 248.725954][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.032009][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.049116][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.072563][ T11] bond0 (unregistering): Released all slaves [ 249.101013][T16902] chnl_net:caif_netlink_parms(): no params data found [ 249.120997][T16930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4937'. [ 249.181756][ T11] hsr_slave_0: left promiscuous mode [ 249.187637][ T11] hsr_slave_1: left promiscuous mode [ 249.195688][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.203330][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.221554][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.229163][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.262957][ T11] veth1_macvtap: left promiscuous mode [ 249.268461][ T11] veth0_macvtap: left promiscuous mode [ 249.274133][ T11] veth1_vlan: left promiscuous mode [ 249.279548][ T11] veth0_vlan: left promiscuous mode [ 249.408349][T16960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=16960 comm=syz.1.4941 [ 249.453370][ T11] team0 (unregistering): Port device team_slave_1 removed [ 249.463875][ T11] team0 (unregistering): Port device team_slave_0 removed [ 249.508033][T16902] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.515168][T16902] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.523121][T16902] bridge_slave_0: entered allmulticast mode [ 249.529616][T16902] bridge_slave_0: entered promiscuous mode [ 249.553527][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 249.570530][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 249.639266][T16902] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.646381][T16902] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.656692][T16902] bridge_slave_1: entered allmulticast mode [ 249.663849][T16902] bridge_slave_1: entered promiscuous mode [ 249.704631][T16902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.753371][T16902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.779404][T16902] team0: Port device team_slave_0 added [ 249.790449][T16902] team0: Port device team_slave_1 added [ 249.830592][T16978] loop3: detected capacity change from 0 to 512 [ 249.843621][T16902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.850625][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.876713][T16902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.890839][T16902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.897812][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.923979][T16902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.977043][T16978] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.4952: iget: bad extended attribute block 1 [ 250.012698][T16902] hsr_slave_0: entered promiscuous mode [ 250.023065][T16978] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4952: couldn't read orphan inode 15 (err -117) [ 250.044321][T16902] hsr_slave_1: entered promiscuous mode [ 250.056516][T16902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.065251][T16978] EXT4-fs mount: 56 callbacks suppressed [ 250.065361][T16978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.087129][T16902] Cannot create hsr debugfs directory [ 250.171133][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 250.180069][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 250.192453][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.488560][T16902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.517524][T16902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.549835][T16902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.578091][T16902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.651788][T16902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.693441][T16902] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.713469][T17036] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 250.713469][T17036] The task syz.3.4971 (17036) triggered the difference, watch for misbehavior. [ 250.745387][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.752535][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.765357][T17035] loop1: detected capacity change from 0 to 4096 [ 250.773040][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.780214][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.792390][T17035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.815645][T16902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.826111][T16902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.987159][T17042] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.185437][T17042] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.214673][T16902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.422721][T16902] veth0_vlan: entered promiscuous mode [ 251.449165][T16902] veth1_vlan: entered promiscuous mode [ 251.484017][T17066] loop0: detected capacity change from 0 to 8192 [ 251.489127][T16902] veth0_macvtap: entered promiscuous mode [ 251.501939][T17066] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.523445][T16902] veth1_macvtap: entered promiscuous mode [ 251.538692][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.549197][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.559066][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.569567][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.579395][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.589950][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.600137][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.610671][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.620754][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.631202][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.641221][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.651631][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.661546][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.672009][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.681870][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.692298][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.703125][T16902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.710692][T17076] netlink: 'syz.3.4984': attribute type 1 has an invalid length. [ 251.718474][T17076] netlink: 'syz.3.4984': attribute type 4 has an invalid length. [ 251.726268][T17076] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.4984'. [ 251.739704][T14104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.757983][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.768692][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.778741][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.789238][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.799078][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.809548][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.819472][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.829998][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.839954][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.850480][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.860319][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.870763][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.880604][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.891129][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.900967][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.911521][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.923072][T16902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.923076][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 251.923090][ T29] audit: type=1326 audit(1720554077.784:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.2.4989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251c685bd9 code=0x0 [ 251.965638][T16902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.974485][T16902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.983473][T16902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.992392][T16902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.005409][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4985'. [ 252.033799][ T29] audit: type=1400 audit(1720554077.894:3837): avc: denied { create } for pid=17087 comm="syz.3.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 252.101654][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4992'. [ 252.157092][T17102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=17102 comm=syz.0.4992 [ 252.176688][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4992'. [ 252.242223][T17107] loop4: detected capacity change from 0 to 8192 [ 252.250897][T17107] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.347406][T17109] team_slave_0: entered promiscuous mode [ 252.353125][T17109] team_slave_1: entered promiscuous mode [ 252.377944][T17111] loop4: detected capacity change from 0 to 1024 [ 252.403186][T17111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.411046][T17109] macsec1: entered promiscuous mode [ 252.420475][T17109] team0: entered promiscuous mode [ 252.425849][T17109] macsec1: entered allmulticast mode [ 252.431203][T17109] team0: entered allmulticast mode [ 252.436360][T17109] team_slave_0: entered allmulticast mode [ 252.442130][T17109] team_slave_1: entered allmulticast mode [ 252.443626][T17111] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.449380][T17109] team0: Device macsec1 is already an upper device of the team interface [ 252.468373][T17109] team0: left allmulticast mode [ 252.473301][T17109] team_slave_0: left allmulticast mode [ 252.478856][T17109] team_slave_1: left allmulticast mode [ 252.484333][T17109] team0: left promiscuous mode [ 252.489350][T17109] team_slave_0: left promiscuous mode [ 252.494819][T17109] team_slave_1: left promiscuous mode [ 252.535116][T16902] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.618412][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 252.695223][ T29] audit: type=1400 audit(1720554078.554:3838): avc: denied { getopt } for pid=17124 comm="syz.4.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.741818][T17128] loop4: detected capacity change from 0 to 256 [ 252.844827][ T29] audit: type=1400 audit(1720554078.704:3839): avc: denied { ioctl } for pid=17140 comm="syz.4.5005" path="/6/file0" dev="configfs" ino=1198 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.930481][ T29] audit: type=1400 audit(1720554078.794:3840): avc: denied { mount } for pid=17148 comm="syz.2.5011" name="/" dev="autofs" ino=61650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 252.978049][T17146] loop3: detected capacity change from 0 to 4096 [ 252.992500][T17154] netlink: 'syz.2.5013': attribute type 1 has an invalid length. [ 253.000374][T17154] netlink: 'syz.2.5013': attribute type 4 has an invalid length. [ 253.015857][T17146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.038006][T17158] sd 0:0:1:0: device reset [ 253.172017][T17162] loop2: detected capacity change from 0 to 256 [ 253.279820][T17163] loop4: detected capacity change from 0 to 1024 [ 253.421598][T17163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.444010][ T29] audit: type=1400 audit(1720554079.304:3841): avc: denied { setattr } for pid=17161 comm="syz.4.5016" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 253.488896][T16902] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.497984][ T29] audit: type=1400 audit(1720554079.354:3842): avc: denied { bind } for pid=17172 comm="syz.2.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.517479][ T29] audit: type=1400 audit(1720554079.354:3843): avc: denied { write } for pid=17172 comm="syz.2.5017" path="socket:[61681]" dev="sockfs" ino=61681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.675745][ T29] audit: type=1400 audit(1720554079.534:3844): avc: denied { associate } for pid=17182 comm="syz.4.5023" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 253.771332][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.793783][T17192] sd 0:0:1:0: device reset [ 253.820637][T17197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17197 comm=syz.4.5029 [ 253.840586][T17197] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 253.860143][T17197] veth0_to_bridge: entered promiscuous mode [ 253.872287][T17195] veth0_to_bridge: left promiscuous mode [ 253.884462][T17203] raw_sendmsg: syz.3.5031 forgot to set AF_INET. Fix it! [ 254.077789][ T29] audit: type=1400 audit(1720554079.934:3845): avc: denied { bind } for pid=17218 comm="syz.1.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.232933][T17250] __nla_validate_parse: 2 callbacks suppressed [ 254.232946][T17250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5051'. [ 254.248209][T17250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5051'. [ 254.290920][T17250] loop3: detected capacity change from 0 to 8192 [ 254.700679][T17262] ================================================================== [ 254.708779][T17262] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 254.715896][T17262] [ 254.718214][T17262] write to 0xffff888102f46800 of 8 bytes by task 17263 on cpu 0: [ 254.725936][T17262] exit_mm+0x9c/0x190 [ 254.729915][T17262] do_exit+0x556/0x1710 [ 254.734067][T17262] do_group_exit+0x102/0x150 [ 254.738658][T17262] get_signal+0xf2f/0x1080 [ 254.743093][T17262] arch_do_signal_or_restart+0x95/0x4b0 [ 254.748637][T17262] syscall_exit_to_user_mode+0x59/0x130 [ 254.754186][T17262] do_syscall_64+0xd6/0x1c0 [ 254.758696][T17262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.764592][T17262] [ 254.766910][T17262] read to 0xffff888102f46800 of 8 bytes by task 17262 on cpu 1: [ 254.774553][T17262] mm_update_next_owner+0x1c9/0x450 [ 254.779750][T17262] exit_mm+0xdc/0x190 [ 254.783732][T17262] do_exit+0x556/0x1710 [ 254.787891][T17262] do_group_exit+0x142/0x150 [ 254.792480][T17262] __x64_sys_exit_group+0x1f/0x20 [ 254.797505][T17262] x64_sys_call+0x27f9/0x2d70 [ 254.802188][T17262] do_syscall_64+0xc9/0x1c0 [ 254.806694][T17262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.812589][T17262] [ 254.814915][T17262] value changed: 0xffff888107207480 -> 0x0000000000000000 [ 254.822012][T17262] [ 254.824332][T17262] Reported by Kernel Concurrency Sanitizer on: [ 254.830484][T17262] CPU: 1 PID: 17262 Comm: syz.2.5057 Tainted: G W 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 254.842112][T17262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.852163][T17262] ==================================================================