last executing test programs: 7.607317643s ago: executing program 2 (id=1310): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 7.411838081s ago: executing program 2 (id=1314): syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) unshare(0xc040400) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x14) fcntl$notify(r0, 0x402, 0x8000003d) creat(&(0x7f0000000000)='./file2\x00', 0x700) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 7.307817034s ago: executing program 2 (id=1315): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10a8c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7d5}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x6b5c, 0x4) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) write$binfmt_script(r2, &(0x7f00000008c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r3, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x400, 0x100000001, 0x400}) 2.241667182s ago: executing program 0 (id=1401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x29, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) 1.699694884s ago: executing program 0 (id=1409): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) (async) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ipv6_route\x00') pread64(r0, 0x0, 0x0, 0x6) (async) pread64(r0, 0x0, 0x0, 0x6) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='./file1\x00', 0x1008008, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c64656275672c6e6f646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c646f74732c646f74732c646f733178666c6f7070792c6e6f646f74732c757365667265652c6e6f646f74732c646f74732c7379735f696d6d757461626c652c6e6f646f74732c636865636b3d7374726963742c002458b40e19de3b9aafb5946cd42eec8968b0fb78ef09dd7e8492cc88fabc83facf32b78c139a9581611404917e3586c0ff7e5715528c4193d39dc4c7d73944eb35fb7813366517bea5", @ANYRESOCT, @ANYBLOB="b0daa1a4d3c1451a99a6397e826b858194c927d43f502d74"], 0x1, 0x1ee, &(0x7f0000000900)="$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") setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) pivot_root(&(0x7f0000000180)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000180)='./file0\x00', 0x0) 1.699339464s ago: executing program 1 (id=1410): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)=@sha1={0x3, "ff458c4b093a21b5769b86fcaf2f8531e4ee1fbc"}, 0x15, 0x0) setxattr$security_capability(0x0, &(0x7f0000000540), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000004c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x35, "f59c80a628d51cf37cce14c07817a4c91b20034df3141ae579226e980b8f5d1f372d478123d55e7a7e0b0f63fb2ea1cc79ea1d123b"}, 0x3e, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000300000303ff", 0x24) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) fallocate(r2, 0x10, 0x0, 0x2c2) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.604882358s ago: executing program 0 (id=1412): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80}) 1.482324772s ago: executing program 2 (id=1346): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0xfffffecc) r3 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)="f4", 0x1}) io_uring_enter(r3, 0x1ffe, 0x0, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="f1028429da6d5fed71", 0x9}], 0x1}}], 0x1, 0x0) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x3, 0x2) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffa) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) 1.427166865s ago: executing program 1 (id=1415): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x4b65, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 1.339524308s ago: executing program 1 (id=1417): r0 = syz_open_dev$loop(0x0, 0xc5ca, 0x80000) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000200)={0xffffffffc135e5ff, 0xe924}) 1.339465208s ago: executing program 1 (id=1418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x3) 1.294084379s ago: executing program 1 (id=1419): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="80d137d6e0ed15018d3ffca949d76c101c4e735e738066b8ff64e25ad8f13d56782ec1c893b755cd8ff111827cf7cc2d8fa3d7e62c49651d557d5ef82dbacc56f18469765d0f7b7f62a790125a454f47c186f18ed7862347c65cb37a27d44a20f125bb0153420a0c7a3750c5c62152f77ce982c04f362b18b67fc165b9ce6159aa3a32f128208cc780046078222505758011babb48bd1f2100d2b70fe92a142b141152e9e50c9cb31c1eac2184ae6dcffcf3d8656832798d4d1d571b6809b53add01c209eaf19d2cc438efd54d39c73642dbdb78715ae4b5f28a3c98220d5a2082fb0809761c701c23447c2d2c07ea6ef909f26b9dcddf90636bbbb2e1125dff3b87f5e6b1b86db6af010a4a0ace96368af67c0e1187567247d81cd0f8b998ba754fa9a9ca5fac0858a10cdce0b9d16d38eaf9e8a7c41705872e4552fc7c08ca49e6c22a4804903bb2119733d412cd640256e3d03b0706c0237fb93d016580995757abffffa9b5b36e633a4fd90fc5f79aa2990b96958da5c6a18803d734744a43403f491e91b407b71aea36c29c28781813311de33d2b9abde0e7e7fd9df1f0e96146767042d73ecce680a5820281a0485415157568ab2bd532dcc954d90c924881319124e5851d951f63a66b31bfb5624a6b02a33c9fc0ff7e058a2ad7798faada09ef0f1096108fb684471f487d5c75230d7c784f338223bdd3453d78a4a33209dd28cd8465c6c522d040672529703765710d251c662bded9b9e167eef8a4c3a264919c42483c65bdfb6031319e37c7706341177c28cbebde48460319327b7bd31fd9062e8aca4900eb5bdcef504abe5a6b8089d2eb3e10f02d863b33504d363a2cc3be50099400202902146d769de8cbb51e7f6562b51851be124117663d255c6a2cc2eb621d96d72304fba46104ee1a266b9383af0985151318f08ef319fc818a8e2c5ebc8e414ef3412c4ce4b277dbef1dfc93899e9a7f61a879cc2272c6045568578075266225f7a2eba6d1887bcb4181c750fd3c9d57851d75cd8a69ef953c94222f031fc45ff728b02f4cf9a0649551ad2e3296e346c56e713373916ec80df38815034fa0cfde57f4aa48a1970b6e455b4612b3e31c3d394a1c5f0772fa6e5cffc3492b63cdae071b2f243b7f9e1ad5eb81f73bc7a2561d6e8c522133d079d95d88994b10680b754ded882c846d3fbda6e5bfed3505b3cc6e39ee8cd1b3401c38f6889b3f1b3a3855d269da43b3483e4a14c2506c1cf121bcad28ebec91747f7d2b6dba56242d9fcb12859f281f4512f0daf1e94bdc2a2081046faaeab0446f7023be611a1c48e82abdf3f66fdf52c595331fe00dfb8bf5a7ade53c0922daeec7b247f801d5cf3ab83ec3bd145f0fecfee5263bc7eb29cfd65ff114c8ba1560137b57b457878d48b99d45a37d20b21fd14ecac000ab46f4c5a11f365be7da0694856cfe7d64eb4770f3d4bce583dd825b3440d8817d993331013d9022c99c932be163a7d347c3a96b09d1c252ddfc11989e8348a96858d8df94becf15888d2ae5829186f14be97566ebe8c844404cf229900abc09e3ae48eef191bb3561960c410cab840f06451af197a926f142c166399e216674f9fca2264d762c7ca844e5809351280e687d22535be4ef5c50d28cfca5f759999f6a31b9fd8d007247f84b407aa43aea3638060fd24e2d055530cd415c61cf5148a3841c7b0b29309ca310159fc71f0136fea0631e4bcd08bf405a5429685f4ac0e710521e7ce8197f8bd2d76002bc13ebf024733863df2eee26a8e3c285dcca6b9f7dd6adb7412507aedf7e8edc0c0ef3ed7340aa5497124b04d7991e23077ede0c641493659ac03bec3503d05aa3fe791f84d90289b85c644a64e3281d01fe58643876f573c1578e721f419bbd48a8a19008082c8e5f33abda3b58181975ccb6b95ba9da7c56905134d5072ddfab8ce83ba2f3369328c7a3a7f15353bf8ea14d3f8f36519f1b20609ec02983c98434230017d14b89f6ca977d306678ce18cb6486ebaea67c17c0d529301495f108c1a514b71f412a126eb2049f300068d9409d02a63ffd5e1fe0457269c4caf7a1ea8c80f85685554fdd79daee25d8f0343cf258ba4d8b09385f7c3ebe86c2e4be83785fb323d8bda5085e917bacc84a4e993d0b7129e2e34e8f735d96cca2239ff91354ca3bcaa3262177cc44129e6fe9089ae8952025e75eb9ed3acc89e11725dc4e19c5a3d75079f9d027ea1b290c218e2748f6e3cb17527371c45de03bdd75888ca01ed6bb99f1e20aae436d0c5cbef4ee9556a92862ea460eb16ec1c51797d9b8fe2a4e7d9662d96ed4900948066128251b6da430c7b6f16337d3d2b7fb92d665f6aa990813f1f91d72375eadcb73ed8cfce0ac901a9f7e58c163b3f8febf64b5daecd6966ec1580cc853c11f52fbec6fed02a9b0fd5f7404bf45acdb8577df86b7f43ee9234f62a1acab08e5306c9ae72fa746cdb1d2f7225f5b817600fe9cb914ac15327b658832083b647e1b7d5deea919b0b1d830ec00a9d2f650033485d1431a43770fe8a3c0419ff32e7275e89c97704547f4d4c2c488e1e4dabd7020063a4bb36cf3ef1df9488ff5f24161e6c45e6ce320c069f984a2fe4a1de51f0c7e4cbb2e47aa4640991aa8206518a8e1280a77cb8dfdbef890ea2cd249196bb2e162d500febf75354be54b8ce4cd9575e61d12bdb417579dc6a4d76064ec04da48a9f5702de9231a3cc81afcf0b8faeb3a9e6da00dc96b7f6b3db3d21cf574147e95040c3aef4e4b59941a7bcc6dcb761e1083c753edff138de2cf80a1cbdfe42812e1393cd9c4031cf512996b6a26c51f15ee45dd0544b00161d52fd26a658f9bff01f2cfc37c6a7453c6d3508ecc6322a5c25292493b3bb2621dd05687dd2272a5c85bdac346e3f1a0d9d25e2a44d288778318a297ef2e152a0669eacf5c016894eef59b97d14e9db2adbad40ef96278c188d7bda4526b5cb8ce51dab1c4d945778244a1c5c8c78a004ec7946c7f5c18f0759d12953ab99e30e64b430511bb35f246416fb41e36c5d5fccb413321069a7783fbe75c78626f176f2da30aaae38fabc1ea0d2e1027c4b0bf006d867b2b223e8dc0877f5d95df99a855d96541868c58742939feab752dafabc02fdaea63aad43e2c6f25365cfcc755df9263478374485f005db5c76ee81dec188602f405ff95b61200f3ca283aefc8ca95fe408cbbc9aff759cffe622238c083fb4557f18b7bab910d6f42d42bd806bed210f2813e0f7c59c053a2480305243c2351734d10754f79583a374ba2374cb557d50aca8a7cb56d3bf1fa90dac132eb9a566944300fdabba76d8ef3adf93423bbd3abb37724d7ba52232c8474971c4d6d570eb3835f28331dd2b2c9705cf69fcbc9f150a03234edadfb39fbfb3d2414bdb8edad53a5388d354477e3bea7bad688b1532840e62aefefd67972aafe0d616e05f06e42fc8fe2aa762795cac3fbdde68c93f977de6dd56bcdc0f6b087b90e6e8246699103240226f7f63c5f5a81f5d99b8ccbc580d43debe45a814148543aac28d92da187061317b5528d12bf7e50048add3caef506e4fb240d06f055ebb8838fea7a2a296abdc0c44f6aa0d60bdd796f5ad5869087e6815cba9b694653d32c9d871092c1d6cf47c0672f2bd386c50702359b5ff2ae8c521d3d5341b5d0b8207e9a29e078c2937280a1fbf2b0f00456ffe605433102aa7f23d7034774cd85b28737ce593a7769038d5edee7916872d44b7a81584bba03f664b5a3694a2f55c90f9b7ac8234bd6849c294e2502a60ee41aba5541419bd424079215966b618ee58214cce9c8bde7934242d62a7950e71233de36e6c44030a7733eb196188b8f4a66e9abeaec7c7f6ba5875f2796d3fd137f3d7c5cd74493b6452dbc125c25c328fba12743487bbc996447ca99b075f844560b68d96271144128dd173dd2c0ebd680b6007a3cb68d6458baeda099abc51ec41676d39e52a3bb6c3a7c194b963bb863d204aac5bdf70bb7b8b663be25e5367421fc59f1c234840e2e4f4c17ec0cc8fb0735311604ae7f1d4578420a7f65b6600a56f38f6f1b6270e3c434b333ec4aadf17280efc30f19c1f803db4d339f95a50875ddd59338bda6d662e40bcd8bc348988bf6a8c5123d2eaf58dbb500872ad3d925f77e9086c87e2d031057ed40654e5eea651cfd4241b3fb400eca8f1c6290368bf1c183100abfc7b66d46c7bd3f21e661950ef75d035a3daf0e8db856593cb689de1fd9297aa4a0839d4bab91b6012c902194647ad72e28eb63cc33ae757c24e20e6d376b9213d7f2c8a612e3fd35c54e6468441c8a68bea7da38b0a778697a2ddee712215b244f6a755aa71947652da779f7a1799bb2a99ad79b4070d6452f97847f03a9db6639faffb7f8d20d10a2c2835f05daead69b410fca68f197a537b62b37fb00d38d2435cd2ec202f5a1db357f5d4c30e0b1da839a3f90ac5ba483780208d5446bd35d61492f205f3c1db69a37b4a4daf825d501366ad0d58ef9e3f87da434172f7b81f10dab6d2006c5fdb99eb91103076a7a20b3015b44404b53a21c67c67c6619b742b4db4f42a39a5e8fc5682b869d699eae48d5b89b09baa23fad4f12eec2b8fda6f93ee28165f5b67fad29f65ec6a3f3c585445a8fab71566ed2bd6889826a43be57c45b183189490dabcc55caadd5e9016c198d2416dc6bab12a599ec90c91a54c065c8fa0d6114641a5b677dc7e28477004858ba9885e1897ebe8a58bec86ebcf6fd5e696c786c72e0003b9c0d2330d2ab74af3d2919787b25f5734602c8eed814cfb63f714ea5b2f3e1c55f598d7ac5ce78f3e1c60b17afd3d200089d1b2ef4ce307a480f2ea92e3ebfffe1fc248ac0206f1457d45e190f8cfae928e927742218227798d0962f150e8253b43575f4c4fb8d112481101cf1490ed57473ea2eaed3e7eda6f231bdd491df77df3e5f1d9390e87ae5e7ac103c6459a0e82d74cc82ba15617ce4a14598e77262501c7110d85cfac50d553f1badfd3eb0beddf3a7031d7385bfdd0a5bbc8acf00aa3c7dab5289e6e0bea867143acf2edc608a758b574833d7cd46fc3d00ba0a039c46cd7829e279bc2236c4ebf383f484e222676621c3acd90fbbc416031ee3396286e7b4d1882aacd3e5905a7bdf176cceb0e415f978bd58ad72ee67dde46a11feafc170c811c4772ea8eb7c849a05022084a9f8f02076913b46f4b291a6754b9bba47b5068f0fa1518d3ec62ead4168db47351e89771841226776209c6f91d4d4ff846883ed81130e3e084d5a4c0a8226425aaac1f3be9007c65d459c4e953eb6264e6dc9ed6494494b76a9bfdd6724e2b39bc167c2b147b7039d4747f00934990d027502ec8aeaef76c899c33d1c8a92cb9e631e84ca1acbd353f8ba670f41b72957135b0579b7c50b31ac7823504c66c4f4bf602ed928845807f6daa3fab57aca2823d32c01cfe087e83beb50ccf8c55544747267c4fb2117ed43991c79524a85152deb651d3c85801233e8c0876dbbcdcaa60c95e442dd5d2e9e054734e21aa39ae6811206e26f89dd997a837d56a2c8c915312ed9bf8590bd4f96df0183c9030820f93878302ac0287e315031cd0a642803ac04ee780dc9fab0a62fe8dd76fe7807c9fe27566a3ce0f24691e3d8d79cee5d7c53a3c0845de4ba413b1269dbb4bd1f793ae69f5712dd0c196f4f9edcd155423cf968aca477f4a4e77fdc4920073e5be1d7d7081c151cadd341da321dc082258e256323bb86a6dda84590d1c007c063", @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="b5a25805e742f21fa9f6c8053e579a308bc6e2875048a8bf103168435b3344e2e2ee96abdde98e7eb381cc81235eb31c1537661dd06c2cd15060339a41d7cc38303e2d194b5feadd198fdccfbdb8c031aa39791c30f376a2eb4472696d3323956d8f2ff12eb5ead4286cc7de5384871a9d6f40f2f8aaeafcf5497cb0d38b63e3a53169", @ANYRES16, @ANYRES16], 0x1, 0x35a, &(0x7f0000000b00)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r6}, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7a}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000041}, 0x8001) 1.059455889s ago: executing program 0 (id=1422): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone3(&(0x7f0000000300)={0x0, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000001080)='tracefs\x00', 0x1001, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000040)={[], [{@context={'context', 0x2c, 'staff_u'}}]}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x45}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="100000000000000029"], 0x18}}], 0x2, 0x4404c000) 1.02640146s ago: executing program 0 (id=1423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r9}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) pwrite64(r3, &(0x7f0000000180)="14", 0x1, 0x4011000bffd) recvmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000040)=""/6, 0x6}], 0x3}, 0x3) (async) recvmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000040)=""/6, 0x6}], 0x3}, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 685.855453ms ago: executing program 3 (id=1428): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2448, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xffffffffe0576894}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x404c024) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000240)=""/231) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b66, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xed, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x98, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000880)={'erspan0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x4, 0x9, {{0x2f, 0x4, 0x3, 0x5, 0xbc, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xb, 0x2d, [@private=0xa010101, @local]}, @generic={0x0, 0x11, "a4ca018035c1122aab1be0e371b03e"}, @rr={0x7, 0x1f, 0xf4, [@broadcast, @empty, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x67, 0x1, 0x2, [{@empty}, {@local, 0x101}]}, @timestamp={0x44, 0x18, 0x5f, 0x0, 0x6, [0x62, 0x0, 0x0, 0xa5, 0x4]}, @ssrr={0x89, 0xf, 0xd, [@remote, @multicast2, @remote]}, @noop, @cipso={0x86, 0x6, 0x2}, @generic={0x44, 0xf, "c5229ed16fef7f6a5b8f2f361d"}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x200}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1a2}, {@empty, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xb876f09ba655a89}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf25030000000400018005000500f7000000600001801400020076657468315f746f5f626174616476000800030003000000080003000100000008000300010000000800030000000000080003000300000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080005000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x40000000) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x3, 'veth1_vlan\x00', {0x5}}) sendfile(r13, r6, 0x0, 0xbced) 607.412807ms ago: executing program 3 (id=1431): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 606.748527ms ago: executing program 4 (id=1432): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x78000000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xbf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 582.758857ms ago: executing program 2 (id=1433): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x3, 0x10}, &(0x7f0000000440)='logon\x00', 0x0) 560.643408ms ago: executing program 2 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x49}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', 0x0, 0x0, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) write$UHID_DESTROY(r1, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x581}}, './file0\x00'}) read(r4, &(0x7f00000005c0)=""/21, 0x15) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r3, @ANYBLOB="00006b746769643d0092", @ANYRESOCT, @ANYRES32, @ANYRESOCT=r2], 0x1, 0x209, &(0x7f00000007c0)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000005480)) geteuid() sched_setscheduler(0x0, 0x1, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008900000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x3e) 445.676043ms ago: executing program 3 (id=1435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x17, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@i}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xfc, &(0x7f0000000dc0)=""/252}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002c80)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}]}}}]}, 0x54}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x0, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 307.855028ms ago: executing program 4 (id=1436): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = io_uring_setup(0x4822, &(0x7f0000000480)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "750a65a3c93199cd485a10497ead5ac3e112baf740f0853a3660ea0ca01c5078a94a0bb37a8dbd611d75f7d309540c18a222bcb970c5d34d2369ea9659f976", 0x1}, 0x60) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0x8}, 0x20) 307.608698ms ago: executing program 4 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @rand_addr, @private}, &(0x7f0000000800)=0xc) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000840)={0x1, 0x70e1f7fe63b8c628, 0x6, 0x2, @vifc_lcl_ifindex=r2, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x28, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYRESOCT=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="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", 0x441}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="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", 0xa44}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x6, 0x1000, {{0x2b, 0x4, 0x1, 0x5, 0xac, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x9, 0x0, 0x4, [0x8]}, @cipso={0x86, 0x6d, 0x2, [{0x6, 0x12, "8890d010bd1a9f7d22103304239120d1"}, {0x6, 0x8, "432e4ef93761"}, {0x2, 0xf, "4203346ba4f2a54d3dc2ce7f77"}, {0x7, 0x3, "9b"}, {0x6, 0xd, "73f6373925c77a6a67fb06"}, {0x5, 0xb, "0c8420e31331082aeb"}, {0x6, 0xb, "5c006264b414cc392f"}, {0x5, 0x11, "643c5f73301c4378170a9efc62666c"}, {0x7, 0x7, "414d16c464"}]}, @timestamp_addr={0x44, 0x1c, 0x23, 0x1, 0x1, [{@rand_addr=0x64010102, 0x96}, {@broadcast, 0x8e40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 301.354368ms ago: executing program 3 (id=1438): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000a40)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x7ffe}}, {@data_err_abort}, {@usrquota}, {@resgid}, {@grpquota}, {@dioread_lock}], [{@uid_gt}, {@fowner_eq}, {@fsname={'fsname', 0x3d, 'resgid'}}, {@smackfsroot={'smackfsroot', 0x3d, '['}}]}, 0x3, 0x457, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x3}]}, 0x90) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000008c0)=ANY=[], 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0xa6, 0x0, 0x864, 0x8841, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x68, 0x0, 0xe0, 0x0, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2, 0x2}, {@multicast2}, {@empty}]}, @noop]}}}}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f00000004c0)) r2 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r2, 0x107, 0xe, 0x0, 0x20600000) r3 = open(0x0, 0x102440, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x2b, 0x0, 0x7, 0x17, 0x4, 0x1, 0x3, 0x42}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5417, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 254.5877ms ago: executing program 4 (id=1439): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)=@sha1={0x3, "ff458c4b093a21b5769b86fcaf2f8531e4ee1fbc"}, 0x15, 0x0) setxattr$security_capability(0x0, &(0x7f0000000540), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000004c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x35, "f59c80a628d51cf37cce14c07817a4c91b20034df3141ae579226e980b8f5d1f372d478123d55e7a7e0b0f63fb2ea1cc79ea1d123b"}, 0x3e, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000300000303ff", 0x24) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) fallocate(r2, 0x10, 0x0, 0x2c2) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 198.338692ms ago: executing program 1 (id=1440): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='ufshcd_command\x00', r1}, 0xf) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 150.676474ms ago: executing program 3 (id=1441): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = io_uring_setup(0x7ab1, &(0x7f0000000300)) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x6, &(0x7f0000000080)=ANY=[], 0x8) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000ac0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540c8050", @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200020000000000000000000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 150.378374ms ago: executing program 4 (id=1442): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 99.848696ms ago: executing program 0 (id=1443): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0xd87f0000, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0) 10.74819ms ago: executing program 4 (id=1444): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x541b, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0xf4240) timerfd_gettime(r2, &(0x7f0000001200)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) sendto$inet6(r0, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000000001030000000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa140004"], 0x98}}, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) getpid() r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00'}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa000032a) openat(r4, 0x0, 0x189702, 0x125) readv(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=1445): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') (async) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "fc9e3c1e2fa36bbbb80305c37098baf96cb67e"}) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x3, 0x9e2, 0x0, 0x0) kernel console output (not intermixed with test programs): lave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.337141][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.349000][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.356079][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.382120][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.455109][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881128a8000: rx timeout, send abort [ 79.463484][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a8000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 79.477867][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a8200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 79.496151][ T6139] hsr_slave_0: entered promiscuous mode [ 79.502571][ T6139] hsr_slave_1: entered promiscuous mode [ 79.508552][ T6139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.516368][ T6139] Cannot create hsr debugfs directory [ 79.525809][ T6205] bridge_slave_1: left allmulticast mode [ 79.531530][ T6205] bridge_slave_1: left promiscuous mode [ 79.537254][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.545205][ T6205] bridge_slave_0: left allmulticast mode [ 79.551016][ T6205] bridge_slave_0: left promiscuous mode [ 79.556737][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.608891][ T6205] batman_adv: batadv0: Removing interface: ip6gretap1 [ 79.672877][ T6205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.683498][ T6205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.693979][ T6205] bond0 (unregistering): Released all slaves [ 79.739700][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 79.785486][ T6077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.796933][ T6285] batadv0: entered promiscuous mode [ 79.802316][ T6285] vlan2: entered promiscuous mode [ 79.809535][ T6285] batadv0: left promiscuous mode [ 79.823359][ T6205] hsr_slave_0: left promiscuous mode [ 79.829446][ T6205] hsr_slave_1: left promiscuous mode [ 79.835581][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.843156][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.851114][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.858664][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.868779][ T6205] veth1_macvtap: left promiscuous mode [ 79.874460][ T6205] veth0_macvtap: left promiscuous mode [ 79.880092][ T6205] veth1_vlan: left promiscuous mode [ 79.885396][ T6205] veth0_vlan: left promiscuous mode [ 79.981259][ T6205] team0 (unregistering): Port device team_slave_1 removed [ 79.992130][ T6205] team0 (unregistering): Port device team_slave_0 removed [ 80.036385][ T6077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.046072][ T6077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.066402][ T6077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.101605][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.109012][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.116405][ T6259] bridge_slave_0: entered allmulticast mode [ 80.123346][ T6259] bridge_slave_0: entered promiscuous mode [ 80.158901][ T6139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.169315][ T6139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.184702][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.191896][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.199398][ T6259] bridge_slave_1: entered allmulticast mode [ 80.206154][ T6259] bridge_slave_1: entered promiscuous mode [ 80.241549][ T6139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.251902][ T6139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.275266][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.296585][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.321859][ T6139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.332312][ T6139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.352623][ T6259] team0: Port device team_slave_0 added [ 80.359648][ T6259] team0: Port device team_slave_1 added [ 80.407085][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.423485][ T6139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.433892][ T6139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.457051][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.464083][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.490344][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.502393][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.509415][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.535338][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.583026][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.610014][ T6139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.619621][ T6139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.630706][ T6259] hsr_slave_0: entered promiscuous mode [ 80.636977][ T6259] hsr_slave_1: entered promiscuous mode [ 80.643087][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.652874][ T6259] Cannot create hsr debugfs directory [ 80.659554][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.666647][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.677841][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.685052][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.700236][ T6139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.719893][ T6139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.742310][ T6077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.752769][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.766273][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881128a9000: rx timeout, send abort [ 80.774680][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a9000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 80.789071][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a9e00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 80.832329][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.886832][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.904686][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.911815][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.951011][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.958141][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.975710][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.004645][ T6139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.015206][ T6139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.129516][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.150706][ T6259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.191387][ T6259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.210780][ T6259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.834153][ T6259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.881388][ T6077] veth0_vlan: entered promiscuous mode [ 81.925375][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.938862][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.963812][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.970943][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.983142][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.990293][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.014434][ T6077] veth1_vlan: entered promiscuous mode [ 82.064654][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881128a8a00: rx timeout, send abort [ 82.078779][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a8a00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 82.083091][ T6077] veth0_macvtap: entered promiscuous mode [ 82.093186][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a9800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 82.112926][ T6077] veth1_macvtap: entered promiscuous mode [ 82.127397][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.137878][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.147749][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.158187][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.168032][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.178593][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.188513][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.199047][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.377609][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.396787][ T6259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.407185][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.431375][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.441952][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.451922][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.462487][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.472423][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.483035][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.492943][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.503415][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.515711][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.536595][ T6211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.546999][ T6211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.569722][ T6077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.578459][ T6077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.587245][ T6077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.596048][ T6077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.623930][ T6211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.634447][ T6211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.691339][ T6211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.701851][ T6211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.778073][ T6211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.788537][ T6211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.823198][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.835589][ T6139] veth0_vlan: entered promiscuous mode [ 82.874672][ T6139] veth1_vlan: entered promiscuous mode [ 82.910656][ T6490] loop3: detected capacity change from 0 to 512 [ 82.924536][ T6490] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.931750][ T6490] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.788: corrupted in-inode xattr: invalid ea_ino [ 82.945759][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 82.945773][ T29] audit: type=1326 audit(1719751692.612:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 82.947275][ T6490] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.788: couldn't read orphan inode 12 (err -117) [ 82.952004][ T29] audit: type=1326 audit(1719751692.612:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 82.961264][ T29] audit: type=1326 audit(1719751692.622:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 82.977832][ T6490] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.987422][ T29] audit: type=1326 audit(1719751692.622:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.014254][ T6211] bridge_slave_1: left allmulticast mode [ 83.034151][ T29] audit: type=1326 audit(1719751692.622:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.034185][ T29] audit: type=1326 audit(1719751692.622:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.046586][ T6211] bridge_slave_1: left promiscuous mode [ 83.069921][ T29] audit: type=1326 audit(1719751692.622:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.075814][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.098871][ T29] audit: type=1326 audit(1719751692.622:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.181588][ T29] audit: type=1326 audit(1719751692.622:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.204894][ T29] audit: type=1326 audit(1719751692.622:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 83.231360][ T6211] O3c: left allmulticast mode [ 83.236350][ T6211] O3c: left promiscuous mode [ 83.241408][ T6211] bridge0: port 1(O3c) entered disabled state [ 83.243560][ T6077] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 83.345225][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 83.360706][ T6510] block device autoloading is deprecated and will be removed. [ 83.378325][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881128a0c00: rx timeout, send abort [ 83.386729][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a0c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 83.401297][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a0800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 83.423007][ T6211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.429344][ T6514] loop3: detected capacity change from 0 to 512 [ 83.440382][ T6211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.451093][ T6211] bond0 (unregistering): Released all slaves [ 83.477407][ T6514] loop3: detected capacity change from 0 to 512 [ 83.523796][ T6518] 9pnet_fd: Insufficient options for proto=fd [ 83.606599][ T6139] veth0_macvtap: entered promiscuous mode [ 83.650931][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 83.715066][ T6211] hsr_slave_0: left promiscuous mode [ 83.733141][ T6211] hsr_slave_1: left promiscuous mode [ 83.747045][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.754730][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.767054][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.774703][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.786545][ T6211] veth1_macvtap: left promiscuous mode [ 83.792246][ T6211] veth0_macvtap: left promiscuous mode [ 83.869980][ T6211] team0 (unregistering): Port device team_slave_1 removed [ 83.882463][ T6211] team0 (unregistering): Port device team_slave_0 removed [ 83.931528][ T6139] veth1_macvtap: entered promiscuous mode [ 83.975079][ T6259] veth0_vlan: entered promiscuous mode [ 84.000055][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.010628][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.020561][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.031071][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.040982][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.051489][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.061428][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.071975][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.082758][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.090478][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.097765][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.105497][ T6457] bridge_slave_0: entered allmulticast mode [ 84.112556][ T6457] bridge_slave_0: entered promiscuous mode [ 84.122493][ T6259] veth1_vlan: entered promiscuous mode [ 84.131735][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.142218][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.152208][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.162823][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.172672][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.183148][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.192978][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.203420][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.217736][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.225635][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.232902][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.240298][ T6457] bridge_slave_1: entered allmulticast mode [ 84.247431][ T6457] bridge_slave_1: entered promiscuous mode [ 84.325521][ T6259] veth0_macvtap: entered promiscuous mode [ 84.352038][ T6139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.360826][ T6139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.369569][ T6139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.378288][ T6139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.381022][ T6546] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.400828][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.421981][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.435817][ T6547] netlink: 'syz.3.802': attribute type 2 has an invalid length. [ 84.443946][ T6547] netlink: 'syz.3.802': attribute type 8 has an invalid length. [ 84.451823][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.802'. [ 84.466807][ T6259] veth1_macvtap: entered promiscuous mode [ 84.479989][ T6457] team0: Port device team_slave_0 added [ 84.486605][ T6457] team0: Port device team_slave_1 added [ 84.503685][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.510769][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.536706][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.548185][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.555224][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.581374][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.612715][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.623248][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.633262][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.643792][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.653677][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.664215][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.674197][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.684742][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.686896][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881128a0e00: rx timeout, send abort [ 84.694566][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.694585][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.703044][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128a0e00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 84.737552][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811162bc00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 84.753022][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.782174][ T6457] hsr_slave_0: entered promiscuous mode [ 84.788559][ T6457] hsr_slave_1: entered promiscuous mode [ 84.795984][ T6457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.805440][ T6457] Cannot create hsr debugfs directory [ 84.822885][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.833656][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.843555][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.854012][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.863913][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.874383][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.884325][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.894780][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.904636][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.915137][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.932354][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.941351][ T6211] IPVS: stop unused estimator thread 0... [ 84.968431][ T6259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.977236][ T6259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.986041][ T6259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.994856][ T6259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.055115][ T6568] loop2: detected capacity change from 0 to 512 [ 85.094759][ T6572] IPVS: length: 28 != 24 [ 85.103347][ T6568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.116552][ T6568] ext4 filesystem being mounted at /root/syzkaller.He1GMa/149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.131785][ T6568] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.811: corrupted xattr block 32: invalid header [ 85.154997][ T6568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.164070][ T6568] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.811: corrupted xattr block 32: invalid header [ 85.179920][ T6568] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.811: corrupted xattr block 32: invalid header [ 85.198532][ T6568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.208487][ T6568] EXT4-fs error (device loop2): ext4_get_inode_usage:901: inode #15: comm syz.2.811: corrupted xattr block 32: invalid header [ 85.254419][ T6568] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810410cfc0 [ 85.269703][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 85.382758][ T6457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.461717][ T6457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.473067][ T6457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.556675][ T6457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.637707][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.653016][ T6592] loop4: detected capacity change from 0 to 256 [ 85.662629][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.666419][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.666464][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.673694][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.673738][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.797733][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.891286][ T4071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.954877][ T6457] veth0_vlan: entered promiscuous mode [ 85.984558][ T6457] veth1_vlan: entered promiscuous mode [ 86.027203][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811162ba00: rx timeout, send abort [ 86.035687][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811162ba00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 86.050062][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811162a600: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 86.071745][ T6457] veth0_macvtap: entered promiscuous mode [ 86.083273][ T6457] veth1_macvtap: entered promiscuous mode [ 86.098234][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.108746][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.118584][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.129125][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.139017][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.149530][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.159363][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.169864][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.179717][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.190257][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.200110][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.210547][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.223344][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.232357][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.243078][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.252932][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.263541][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.273379][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.283831][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.293838][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.304371][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.314424][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.324929][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.334832][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.345285][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.357967][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.373535][ T6457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.382305][ T6457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.391205][ T6457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.400272][ T6457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.411384][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'. [ 86.423211][ T6631] program syz.3.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.442909][ T6629] loop2: detected capacity change from 0 to 1024 [ 86.507212][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.546609][ T6629] pim6reg: entered allmulticast mode [ 86.550612][ T6644] netlink: 76 bytes leftover after parsing attributes in process `syz.3.829'. [ 86.563052][ T6629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.589488][ T6629] pim6reg: left allmulticast mode [ 86.621010][ T6645] batadv0: entered promiscuous mode [ 86.627907][ T6645] vlan2: entered promiscuous mode [ 86.636040][ T6645] batadv0: left promiscuous mode [ 86.817031][ T6648] loop3: detected capacity change from 0 to 512 [ 86.964785][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.081265][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.839'. [ 87.203967][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.327620][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811162be00: rx timeout, send abort [ 87.336075][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811162be00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 87.350568][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811162b800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 87.477653][ T6688] loop3: detected capacity change from 0 to 778 [ 87.492159][ T6688] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 87.889929][ T6722] loop0: detected capacity change from 0 to 512 [ 87.914995][ T6722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.933112][ T6727] sit0: entered promiscuous mode [ 87.950836][ T6722] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 87.978123][ T6457] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.098892][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 88.123482][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 88.123497][ T29] audit: type=1326 audit(1719751697.792:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.188898][ T29] audit: type=1326 audit(1719751697.822:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.195579][ T6683] syz.4.844 (6683) used greatest stack depth: 8208 bytes left [ 88.212431][ T29] audit: type=1326 audit(1719751697.822:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.243376][ T29] audit: type=1326 audit(1719751697.822:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.249762][ T6743] loop3: detected capacity change from 0 to 256 [ 88.266836][ T29] audit: type=1326 audit(1719751697.822:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.296734][ T29] audit: type=1326 audit(1719751697.822:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.304350][ T6743] FAT-fs (loop3): Unrecognized mount option "uni_xl{te=1" or missing value [ 88.320215][ T29] audit: type=1326 audit(1719751697.822:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.352284][ T29] audit: type=1326 audit(1719751697.822:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.375512][ T29] audit: type=1326 audit(1719751697.832:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.399092][ T29] audit: type=1326 audit(1719751697.832:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505e291b99 code=0x7ffc0000 [ 88.634014][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810e8b0200: rx timeout, send abort [ 88.642788][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810e8b0200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 88.657290][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810e8b1400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 88.907576][ T6777] loop2: detected capacity change from 0 to 1024 [ 88.915824][ T6777] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 88.981653][ T6784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6784 comm=syz.2.874 [ 89.147801][ T6804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.881'. [ 89.180946][ T6807] ip6erspan0: entered promiscuous mode [ 89.199159][ T6809] loop3: detected capacity change from 0 to 1024 [ 89.249353][ T6809] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 89.275859][ T6799] loop2: detected capacity change from 0 to 8192 [ 89.307820][ T6799] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.322459][ T6823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6823 comm=syz.1.886 [ 89.709222][ T6849] usb usb8: usbfs: process 6849 (syz.1.892) did not claim interface 0 before use [ 89.904255][ T6869] loop0: detected capacity change from 0 to 1024 [ 89.912368][ T6869] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 89.944850][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810bbcc800: rx timeout, send abort [ 89.953303][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810bbcc800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 89.967806][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810bbcde00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 90.074564][ T6211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.234665][ T6211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.347215][ T6211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.423510][ T6211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.448025][ T6917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6917 comm=syz.3.912 [ 90.489190][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 90.616704][ T6211] bridge_slave_1: left allmulticast mode [ 90.622471][ T6211] bridge_slave_1: left promiscuous mode [ 90.628188][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.642641][ T6211] bridge_slave_0: left allmulticast mode [ 90.648415][ T6211] bridge_slave_0: left promiscuous mode [ 90.654192][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.792943][ T6211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.805474][ T6211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.827796][ T6936] loop3: detected capacity change from 0 to 512 [ 90.828946][ T6211] bond0 (unregistering): Released all slaves [ 90.842579][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.849758][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.857422][ T6895] bridge_slave_0: entered allmulticast mode [ 90.864127][ T6895] bridge_slave_0: entered promiscuous mode [ 90.877772][ T6936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.890509][ T6936] ext4 filesystem being mounted at /root/syzkaller.UFoVl3/39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.890588][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.910088][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.917737][ T6895] bridge_slave_1: entered allmulticast mode [ 90.924590][ T6895] bridge_slave_1: entered promiscuous mode [ 90.958069][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.973077][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.993138][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.014143][ T6211] hsr_slave_0: left promiscuous mode [ 91.025959][ T6211] hsr_slave_1: left promiscuous mode [ 91.035772][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.043286][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.053160][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.060818][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.076948][ T6211] veth1_macvtap: left promiscuous mode [ 91.083009][ T6211] veth0_macvtap: left promiscuous mode [ 91.088597][ T6211] veth1_vlan: left promiscuous mode [ 91.093959][ T6211] veth0_vlan: left promiscuous mode [ 91.095671][ T6950] loop3: detected capacity change from 0 to 2048 [ 91.149159][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.166569][ T6950] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.920: bg 0: block 234: padding at end of block bitmap is not set [ 91.182241][ T6950] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 91.194818][ T6950] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.194818][ T6950] [ 91.220006][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.247350][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112a08000: rx timeout, send abort [ 91.255882][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a08000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 91.270312][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a09a00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 91.312205][ T6211] team0 (unregistering): Port device team_slave_1 removed [ 91.323697][ T6211] team0 (unregistering): Port device team_slave_0 removed [ 91.377471][ T6976] loop3: detected capacity change from 0 to 256 [ 91.390717][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 91.390733][ T6959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6959 comm=syz.0.922 [ 91.412915][ T6895] team0: Port device team_slave_0 added [ 91.420085][ T6895] team0: Port device team_slave_1 added [ 91.441889][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.448902][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.474887][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.493938][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.500986][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.526933][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.538293][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.928'. [ 91.576287][ T6895] hsr_slave_0: entered promiscuous mode [ 91.589230][ T6895] hsr_slave_1: entered promiscuous mode [ 91.595628][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.603292][ T6895] Cannot create hsr debugfs directory [ 91.673207][ T6998] netlink: 277 bytes leftover after parsing attributes in process `syz.2.936'. [ 91.695473][ T6998] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 91.724111][ T7001] pim6reg: entered allmulticast mode [ 91.767666][ T7007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7007 comm=syz.4.939 [ 91.963550][ T6895] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.972803][ T6895] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.981881][ T6895] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.991103][ T6895] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.032490][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.045072][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.056036][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.063213][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.075157][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.082341][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.110201][ T6895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.165892][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.245445][ T6895] veth0_vlan: entered promiscuous mode [ 92.255831][ T6895] veth1_vlan: entered promiscuous mode [ 92.274947][ T6895] veth0_macvtap: entered promiscuous mode [ 92.282890][ T6895] veth1_macvtap: entered promiscuous mode [ 92.294074][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.304893][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.314912][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.325359][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.335206][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.345654][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.355539][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.366068][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.375944][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.386410][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.396287][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.406748][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.418714][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.431242][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.441744][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.451599][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.462074][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.472822][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.483324][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.493208][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.503823][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.513717][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.524314][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.534225][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.544701][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.554534][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888107abaa00: rx timeout, send abort [ 92.562853][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107abaa00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 92.562919][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107aba800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 92.594355][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.604566][ T6895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.613490][ T6895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622230][ T6895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622325][ T7029] rtc_cmos 00:00: Alarms can be up to one day in the future [ 92.631338][ T6895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.741865][ T7038] netlink: 277 bytes leftover after parsing attributes in process `syz.4.947'. [ 92.753554][ T7038] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 92.773078][ T7044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7044 comm=syz.3.949 [ 92.903743][ T7057] loop1: detected capacity change from 0 to 128 [ 92.921826][ T7057] FAT-fs (loop1): Unrecognized mount option "0x00000000000000000xffffffffffffffff7?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 92.947450][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 92.973316][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.020656][ T7063] bridge_slave_0 (unregistering): left allmulticast mode [ 93.027869][ T7063] bridge_slave_0 (unregistering): left promiscuous mode [ 93.032423][ T7068] hub 3-0:1.0: USB hub found [ 93.034920][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.053584][ T7068] hub 3-0:1.0: 8 ports detected [ 93.337683][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 93.337707][ T29] audit: type=1400 audit(1719751703.002:2612): avc: denied { create } for pid=7078 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.388811][ T29] audit: type=1400 audit(1719751703.032:2613): avc: denied { ioctl } for pid=7078 comm="syz.0.960" path="socket:[20759]" dev="sockfs" ino=20759 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.555534][ T7065] netlink: 'syz.3.951': attribute type 33 has an invalid length. [ 93.563354][ T7065] netlink: 152 bytes leftover after parsing attributes in process `syz.3.951'. [ 93.583920][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 93.628160][ T7083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7083 comm=syz.4.961 [ 93.693278][ T7088] 9pnet_fd: Insufficient options for proto=fd [ 93.724616][ T29] audit: type=1400 audit(1719751703.392:2614): avc: denied { write } for pid=7097 comm="syz.1.966" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.768533][ T7100] hub 3-0:1.0: USB hub found [ 93.781453][ T7100] hub 3-0:1.0: 8 ports detected [ 93.824807][ T29] audit: type=1326 audit(1719751703.492:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 93.841739][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888107aba600: rx timeout, send abort [ 93.856596][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107aba600: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 93.857876][ T29] audit: type=1326 audit(1719751703.492:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 93.870971][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107aba400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 93.899347][ T7122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7122 comm=syz.4.973 [ 93.915433][ T29] audit: type=1326 audit(1719751703.542:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 93.944745][ T29] audit: type=1326 audit(1719751703.542:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 93.968207][ T29] audit: type=1326 audit(1719751703.542:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 93.992831][ T29] audit: type=1326 audit(1719751703.592:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 94.016334][ T29] audit: type=1326 audit(1719751703.592:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 94.100838][ T7139] netlink: 312 bytes leftover after parsing attributes in process `syz.1.978'. [ 94.121118][ T7143] loop2: detected capacity change from 0 to 512 [ 94.164814][ T7146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.980'. [ 94.164847][ T7143] netlink: 'syz.2.979': attribute type 4 has an invalid length. [ 94.225691][ T7153] loop0: detected capacity change from 0 to 128 [ 94.243954][ T7153] FAT-fs (loop0): Unrecognized mount option "0x00000000000000000xffffffffffffffff7?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 94.333256][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7163 comm=syz.1.985 [ 94.377156][ T7152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.981'. [ 94.387439][ T7168] netlink: 84 bytes leftover after parsing attributes in process `syz.1.986'. [ 94.447148][ T7173] loop2: detected capacity change from 0 to 512 [ 94.464230][ T7173] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.528094][ T7173] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 94.562144][ T4071] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 94.625291][ T7190] loop3: detected capacity change from 0 to 512 [ 94.646929][ T7190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.649111][ T7189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.993'. [ 94.667994][ T7188] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 94.679682][ T7193] loop2: detected capacity change from 0 to 2048 [ 94.705312][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.769596][ T7193] loop2: p2 < > [ 95.054048][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 95.070797][ T7232] bridge0: port 3(gretap0) entered blocking state [ 95.077526][ T7232] bridge0: port 3(gretap0) entered disabled state [ 95.085276][ T7232] gretap0: entered allmulticast mode [ 95.091462][ T7232] gretap0: entered promiscuous mode [ 95.097117][ T7232] bridge0: port 3(gretap0) entered blocking state [ 95.103624][ T7232] bridge0: port 3(gretap0) entered forwarding state [ 95.122755][ T7237] xt_CT: No such helper "snmp_trap" [ 95.144592][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888107aba000: rx timeout, send abort [ 95.153002][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107aba000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 95.167430][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107abba00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 95.181984][ T7237] xt_CT: No such helper "snmp_trap" [ 95.200001][ T7237] xt_CT: No such helper "snmp_trap" [ 95.221037][ T7237] xt_CT: No such helper "snmp_trap" [ 95.234695][ T7237] xt_CT: No such helper "snmp_trap" [ 95.247831][ T7237] xt_CT: No such helper "snmp_trap" [ 95.260895][ T7237] xt_CT: No such helper "snmp_trap" [ 95.275784][ T7237] xt_CT: No such helper "snmp_trap" [ 95.292886][ T7237] xt_CT: No such helper "snmp_trap" [ 95.298897][ T7258] xt_CT: No such helper "syz0" [ 95.346615][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1014'. [ 95.395857][ T3186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.504138][ T3186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.590288][ T3186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.628235][ T7293] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1019'. [ 95.695817][ T7307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1020'. [ 95.804000][ T3186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.875537][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 95.909170][ T7328] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 95.975295][ T7333] loop2: detected capacity change from 0 to 256 [ 95.989396][ T3186] bridge_slave_1: left allmulticast mode [ 95.995175][ T3186] bridge_slave_1: left promiscuous mode [ 96.001042][ T3186] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.021628][ T3186] bridge_slave_0: left allmulticast mode [ 96.027497][ T3186] bridge_slave_0: left promiscuous mode [ 96.033277][ T3186] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.181847][ T3186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.199032][ T3186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.211047][ T3186] bond0 (unregistering): Released all slaves [ 96.303991][ T3186] hsr_slave_0: left promiscuous mode [ 96.319681][ T3186] hsr_slave_1: left promiscuous mode [ 96.325723][ T3186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.333221][ T3186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.359237][ T3186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.366681][ T3186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.388172][ T3186] veth1_macvtap: left promiscuous mode [ 96.393867][ T3186] veth0_macvtap: left promiscuous mode [ 96.399449][ T3186] veth1_vlan: left promiscuous mode [ 96.404752][ T3186] veth0_vlan: left promiscuous mode [ 96.456899][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888107aba200: rx timeout, send abort [ 96.465295][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107aba200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 96.479704][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107abbc00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 96.536612][ T7359] 9pnet_fd: Insufficient options for proto=fd [ 96.708706][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1034'. [ 96.855125][ T3186] team0 (unregistering): Port device team_slave_1 removed [ 96.865750][ T3186] team0 (unregistering): Port device team_slave_0 removed [ 96.952981][ T7292] chnl_net:caif_netlink_parms(): no params data found [ 97.005047][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.012367][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.021180][ T7292] bridge_slave_0: entered allmulticast mode [ 97.028066][ T7292] bridge_slave_0: entered promiscuous mode [ 97.035842][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.043126][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.050433][ T7292] bridge_slave_1: entered allmulticast mode [ 97.057095][ T7292] bridge_slave_1: entered promiscuous mode [ 97.085282][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.097074][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.126581][ T7292] team0: Port device team_slave_0 added [ 97.143548][ T7392] dummy0: entered promiscuous mode [ 97.153524][ T7392] vlan2: entered promiscuous mode [ 97.166629][ T7392] dummy0: left promiscuous mode [ 97.240987][ T7292] team0: Port device team_slave_1 added [ 97.241472][ T7400] loop3: detected capacity change from 0 to 128 [ 97.270286][ T7400] FAT-fs (loop3): Unrecognized mount option "0x00000000000000000xffffffffffffffff7?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 97.321459][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.328482][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.354628][ T7292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.401476][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.408469][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.434637][ T7292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.489612][ T7292] hsr_slave_0: entered promiscuous mode [ 97.496434][ T7292] hsr_slave_1: entered promiscuous mode [ 97.505921][ T7292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.521281][ T7292] Cannot create hsr debugfs directory [ 97.767034][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888107abb600: rx timeout, send abort [ 97.775429][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107abb600: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 97.789830][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888107abac00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 97.807282][ T7436] 9pnet_fd: Insufficient options for proto=fd [ 98.034300][ T7292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.108503][ T7292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.136502][ T7292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.146767][ T7292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.231424][ T7292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.267164][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.277317][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.284518][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.301942][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.309095][ T3167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.411647][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 98.411663][ T29] audit: type=1326 audit(1719751708.082:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.446407][ T29] audit: type=1326 audit(1719751708.082:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.460533][ T7292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.470262][ T29] audit: type=1326 audit(1719751708.082:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.500774][ T29] audit: type=1326 audit(1719751708.082:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.524443][ T29] audit: type=1326 audit(1719751708.082:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.547915][ T29] audit: type=1326 audit(1719751708.082:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.571347][ T29] audit: type=1326 audit(1719751708.082:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.594912][ T29] audit: type=1326 audit(1719751708.082:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.601249][ T7292] veth0_vlan: entered promiscuous mode [ 98.618955][ T29] audit: type=1326 audit(1719751708.082:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.635380][ T7292] veth1_vlan: entered promiscuous mode [ 98.647722][ T29] audit: type=1326 audit(1719751708.082:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x7ffc0000 [ 98.703466][ T7292] veth0_macvtap: entered promiscuous mode [ 98.712420][ T7292] veth1_macvtap: entered promiscuous mode [ 98.725409][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.735988][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.745943][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.756425][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.766350][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.776831][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.786868][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.797399][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.807526][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.818192][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.828332][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.838832][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.851460][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.860217][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.871140][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.881323][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.891845][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.901753][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.912247][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.922088][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.932657][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.942564][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.953179][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.963178][ T7292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.973639][ T7292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.986280][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.010497][ T7292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.016166][ T7495] loop2: detected capacity change from 0 to 128 [ 99.019337][ T7292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034782][ T7292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043557][ T7292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.052551][ T7495] FAT-fs (loop2): Unrecognized mount option "0x00000000000000000xffffffffffffffff7?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 99.066288][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810e8a8c00: rx timeout, send abort [ 99.077261][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810e8a8c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 99.091746][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810e8a9e00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 99.133630][ T7498] dummy0: entered promiscuous mode [ 99.144476][ T7498] vlan3: entered promiscuous mode [ 99.160539][ T7498] dummy0: left promiscuous mode [ 99.166829][ T7501] loop0: detected capacity change from 0 to 764 [ 99.206839][ T7501] ISOFS: unable to read i-node block [ 99.370669][ T7526] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.379525][ T7526] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.388382][ T7526] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.397215][ T7526] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.454057][ T7533] tipc: Started in network mode [ 99.458991][ T7533] tipc: Node identity , cluster identity 4711 [ 99.465134][ T7533] tipc: Failed to set node id, please configure manually [ 99.472220][ T7533] tipc: Enabling of bearer rejected, failed to enable media [ 99.546385][ T7540] vcan0: entered promiscuous mode [ 99.556828][ T7540] vlan2: entered promiscuous mode [ 99.564326][ T7540] vcan0: left promiscuous mode [ 99.625997][ T7542] __nla_validate_parse: 4 callbacks suppressed [ 99.626072][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1088'. [ 99.815680][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 99.834499][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 99.849047][ T7565] loop0: detected capacity change from 0 to 256 [ 100.380230][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810e8a8600: rx timeout, send abort [ 100.388574][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810e8a8600: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 100.403077][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a03a00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 100.855701][ T7558] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 100.910119][ T7565] Process accounting resumed [ 100.986934][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 101.007415][ T7583] dummy0: entered promiscuous mode [ 101.012930][ T7583] vlan0: entered promiscuous mode [ 101.019942][ T7583] dummy0: left promiscuous mode [ 101.033364][ T7581] IPv6: Can't replace route, no match found [ 101.062032][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.134525][ T7594] loop3: detected capacity change from 0 to 128 [ 101.146953][ T7594] bridge_slave_0: left allmulticast mode [ 101.152798][ T7594] bridge_slave_0: left promiscuous mode [ 101.158613][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.168519][ T7594] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.347474][ T7612] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.395939][ T7619] loop3: detected capacity change from 0 to 512 [ 101.403936][ T7619] ext4: Bad value for 'data' [ 101.494195][ T7623] vcan0: entered promiscuous mode [ 101.499469][ T7623] vlan2: entered promiscuous mode [ 101.505742][ T7623] vcan0: left promiscuous mode [ 101.541352][ T7625] loop3: detected capacity change from 0 to 2048 [ 101.549563][ T7625] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (2000000) [ 101.594010][ T7627] lo speed is unknown, defaulting to 1000 [ 101.600815][ T7627] lo speed is unknown, defaulting to 1000 [ 101.606728][ T7627] lo speed is unknown, defaulting to 1000 [ 101.644910][ T7627] infiniband syz0: set active [ 101.649777][ T7627] infiniband syz0: added lo [ 101.654396][ T24] lo speed is unknown, defaulting to 1000 [ 101.680989][ T7627] RDS/IB: syz0: added [ 101.685163][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112a03e00: rx timeout, send abort [ 101.693579][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a03e00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 101.693683][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a02000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 101.730334][ T7627] smc: adding ib device syz0 with port count 1 [ 101.736632][ T7627] smc: ib device syz0 port 1 has pnetid [ 101.742712][ T3590] lo speed is unknown, defaulting to 1000 [ 101.748795][ T7627] lo speed is unknown, defaulting to 1000 [ 101.783593][ T7627] lo speed is unknown, defaulting to 1000 [ 101.824554][ T7627] lo speed is unknown, defaulting to 1000 [ 101.860424][ T7627] lo speed is unknown, defaulting to 1000 [ 101.897141][ T7627] lo speed is unknown, defaulting to 1000 [ 101.947624][ T7627] lo speed is unknown, defaulting to 1000 [ 102.017572][ T7627] lo speed is unknown, defaulting to 1000 [ 102.093979][ T7667] dummy0: entered promiscuous mode [ 102.103085][ T7667] vlan0: entered promiscuous mode [ 102.111041][ T7667] dummy0: left promiscuous mode [ 102.148500][ T7669] dummy0: entered promiscuous mode [ 102.154088][ T7669] vlan3: entered promiscuous mode [ 102.168881][ T7669] dummy0: left promiscuous mode [ 102.280746][ T7698] loop3: detected capacity change from 0 to 1024 [ 102.305361][ T7698] EXT4-fs: Ignoring removed orlov option [ 102.311345][ T7698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.351582][ T7698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.485470][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.647369][ T7728] vcan0: entered promiscuous mode [ 102.657096][ T7728] vlan2: entered promiscuous mode [ 102.699656][ T7730] loop3: detected capacity change from 0 to 2048 [ 102.761806][ T7728] vcan0: left promiscuous mode [ 102.809541][ T7730] loop3: p1 < > p4 [ 102.814646][ T7730] loop3: p4 size 8388608 extends beyond EOD, truncated [ 102.935422][ T7738] loop4: detected capacity change from 256 to 255 [ 102.957930][ T7741] netlink: 'syz.3.1155': attribute type 10 has an invalid length. [ 102.981834][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811161aa00: rx timeout, send abort [ 102.990498][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811161aa00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 103.005269][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811161ae00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 103.053210][ T7741] team0: Port device dummy0 added [ 103.116276][ T7745] batadv0: entered promiscuous mode [ 103.241161][ T7762] block device autoloading is deprecated and will be removed. [ 103.384594][ T7777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7777 comm=syz.2.1169 [ 103.453240][ T7788] 9pnet_fd: Insufficient options for proto=fd [ 103.844945][ T7807] loop0: detected capacity change from 0 to 128 [ 104.032534][ T7807] bridge_slave_0: left allmulticast mode [ 104.038236][ T7807] bridge_slave_0: left promiscuous mode [ 104.043960][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.063898][ T7807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.153040][ T7810] O3c: renamed from bridge_slave_0 (while UP) [ 104.195575][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 104.195653][ T29] audit: type=1326 audit(1719751713.862:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.286755][ T29] audit: type=1326 audit(1719751713.892:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.291911][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881128aee00: rx timeout, send abort [ 104.310391][ T29] audit: type=1326 audit(1719751713.912:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310475][ T29] audit: type=1326 audit(1719751713.912:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310507][ T29] audit: type=1326 audit(1719751713.912:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310538][ T29] audit: type=1326 audit(1719751713.922:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310568][ T29] audit: type=1326 audit(1719751713.922:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310655][ T29] audit: type=1326 audit(1719751713.932:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310685][ T29] audit: type=1326 audit(1719751713.932:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.310715][ T29] audit: type=1326 audit(1719751713.932:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7813 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d3bb3b99 code=0x7ffc0000 [ 104.552339][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128aee00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 104.568761][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128af400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 104.693985][ T7823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7823 comm=syz.1.1183 [ 104.761280][ T7824] loop2: detected capacity change from 0 to 1024 [ 104.815974][ T7824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.911051][ T4071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.974252][ T7861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7861 comm=syz.1.1197 [ 104.993763][ T7864] loop2: detected capacity change from 0 to 256 [ 105.017002][ T7867] loop3: detected capacity change from 0 to 128 [ 105.063448][ T7864] loop2: detected capacity change from 0 to 512 [ 105.084402][ T7864] ext4: Unknown parameter 'nouser_xattr' [ 105.123190][ T7864] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 105.169908][ T7864] syzkaller0: entered promiscuous mode [ 105.175428][ T7864] syzkaller0: entered allmulticast mode [ 105.296193][ T7897] vcan0: entered promiscuous mode [ 105.301498][ T7897] vlan2: entered promiscuous mode [ 105.308321][ T7897] vcan0: left promiscuous mode [ 105.344186][ T7904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1213'. [ 105.442337][ T7914] mmap: syz.4.1217 (7914): VmData 20688896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 105.456278][ T7913] sctp: [Deprecated]: syz.1.1216 (pid 7913) Use of int in maxseg socket option. [ 105.456278][ T7913] Use struct sctp_assoc_value instead [ 105.519101][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 105.546364][ T7923] loop0: detected capacity change from 0 to 256 [ 105.628252][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.830410][ T7938] vcan0: entered promiscuous mode [ 105.835650][ T7938] vlan2: entered promiscuous mode [ 105.846945][ T7938] vcan0: left promiscuous mode [ 105.849651][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881128ae200: rx timeout, send abort [ 105.860198][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881128ae200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 105.874734][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112af1400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 105.903096][ T7941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1229'. [ 106.052831][ T7942] lo speed is unknown, defaulting to 1000 [ 106.174404][ T7942] chnl_net:caif_netlink_parms(): no params data found [ 106.254016][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.261172][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.273687][ T7942] bridge_slave_0: entered allmulticast mode [ 106.280724][ T7942] bridge_slave_0: entered promiscuous mode [ 106.291383][ T7977] lo speed is unknown, defaulting to 1000 [ 106.303841][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.311026][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.346508][ T7942] bridge_slave_1: entered allmulticast mode [ 106.365774][ T7942] bridge_slave_1: entered promiscuous mode [ 106.423517][ T7942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.434876][ T7942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.472750][ T7942] team0: Port device team_slave_0 added [ 106.487121][ T7942] team0: Port device team_slave_1 added [ 106.528547][ T7984] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 106.536429][ T7984] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 106.547797][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 106.561119][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.568110][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.594133][ T7942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.631052][ T7982] lo speed is unknown, defaulting to 1000 [ 106.632665][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.644000][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.669933][ T7942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.794246][ T7942] hsr_slave_0: entered promiscuous mode [ 106.828024][ T7942] hsr_slave_1: entered promiscuous mode [ 106.843472][ T7942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.856234][ T7942] Cannot create hsr debugfs directory [ 106.874851][ T7988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1242'. [ 106.938287][ T7994] loop3: detected capacity change from 0 to 256 [ 106.962816][ T7994] netlink: 'syz.3.1245': attribute type 16 has an invalid length. [ 106.970785][ T7994] netlink: 'syz.3.1245': attribute type 4 has an invalid length. [ 106.978519][ T7994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1245'. [ 106.990623][ T7994] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.037844][ T4131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.048211][ T4131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.105559][ T4131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.115968][ T4131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.150219][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112af1e00: rx timeout, send abort [ 107.158817][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112af1e00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 107.164183][ T8009] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1247'. [ 107.173219][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112af1200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 107.186780][ T8010] loop3: detected capacity change from 0 to 512 [ 107.209031][ T4131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.219426][ T4131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.240538][ T8010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.264136][ T8010] ext4 filesystem being mounted at /root/syzkaller.UFoVl3/117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.280340][ T8010] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1250: corrupted xattr block 32: invalid header [ 107.293784][ T8010] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 107.303044][ T8010] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1250: corrupted xattr block 32: invalid header [ 107.322862][ T8010] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 107.327124][ T4131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.333112][ T8010] EXT4-fs error (device loop3): ext4_xattr_block_find:1871: inode #15: comm syz.3.1250: corrupted xattr block 32: invalid header [ 107.342446][ T4131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.383958][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.390471][ T8022] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1254'. [ 107.459254][ T4131] bridge_slave_1: left allmulticast mode [ 107.464945][ T4131] bridge_slave_1: left promiscuous mode [ 107.470732][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.519673][ T8027] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 107.590722][ T4131] batman_adv: batadv0: Removing interface: ip6gretap1 [ 107.690611][ T4131] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 107.698946][ T4131] bridge1 (unregistering): left promiscuous mode [ 107.718306][ T8043] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 107.726127][ T8043] netlink: 'syz.4.1263': attribute type 2 has an invalid length. [ 107.734426][ T8047] loop3: detected capacity change from 0 to 2048 [ 107.735904][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 107.760726][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.812195][ T4131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.823547][ T4131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.835666][ T4131] bond0 (unregistering): Released all slaves [ 107.845132][ T4131] bond1 (unregistering): Released all slaves [ 108.038931][ T8047] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.066454][ T8047] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.078998][ T8047] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.078998][ T8047] [ 108.088657][ T8047] EXT4-fs (loop3): Total free blocks count 0 [ 108.094840][ T8047] EXT4-fs (loop3): Free/Dirty block details [ 108.100901][ T8047] EXT4-fs (loop3): free_blocks=2415919104 [ 108.106719][ T8047] EXT4-fs (loop3): dirty_blocks=8192 [ 108.112139][ T8047] EXT4-fs (loop3): Block reservation details [ 108.118185][ T8047] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 108.125201][ T4131] hsr_slave_0: left promiscuous mode [ 108.132988][ T8067] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1808 sclass=netlink_xfrm_socket pid=8067 comm=syz.1.1269 [ 108.145786][ T4131] hsr_slave_1: left promiscuous mode [ 108.158563][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.166196][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.176743][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 108.190114][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.197588][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.211945][ T8073] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 108.219954][ T8073] netlink: 'syz.1.1273': attribute type 2 has an invalid length. [ 108.230414][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 108.239562][ T4131] veth1_macvtap: left promiscuous mode [ 108.245080][ T4131] veth0_macvtap: left promiscuous mode [ 108.327175][ T4131] team0 (unregistering): Port device team_slave_1 removed [ 108.341141][ T4131] team0 (unregistering): Port device team_slave_0 removed [ 108.343497][ T8082] loop3: detected capacity change from 0 to 164 [ 108.397659][ T8083] lo speed is unknown, defaulting to 1000 [ 108.398914][ T7942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.423061][ T7942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.443030][ T7942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.458573][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112a00e00: rx timeout, send abort [ 108.467170][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a00e00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 108.481681][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a01c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 108.500370][ T7942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.602282][ T8094] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 108.666153][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.724377][ T7942] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.754846][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.761961][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.784553][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.791735][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.966307][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.110312][ T8114] loop0: detected capacity change from 0 to 764 [ 109.117034][ T7942] veth0_vlan: entered promiscuous mode [ 109.130721][ T7942] veth1_vlan: entered promiscuous mode [ 109.139916][ T8114] iso9660: Unknown parameter '0xffffffffffffffff' [ 109.152577][ T7942] veth0_macvtap: entered promiscuous mode [ 109.163644][ T7942] veth1_macvtap: entered promiscuous mode [ 109.183643][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.194232][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.204248][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.214688][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.224623][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.235144][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.235863][ T8114] loop0: detected capacity change from 0 to 512 [ 109.245075][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.245098][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.271743][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.282246][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.292162][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.302643][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.337591][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.362354][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 109.362370][ T29] audit: type=1400 audit(1719751719.032:2880): avc: denied { connect } for pid=8115 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.398605][ T29] audit: type=1400 audit(1719751719.062:2881): avc: denied { read } for pid=8115 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.419191][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.429750][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.439629][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.450297][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.460381][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.470884][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.480878][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.491486][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.501368][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.511994][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.521963][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.532414][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.555951][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.566772][ T7942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.575554][ T7942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.577667][ T8089] syz.1.1277 (8089) used greatest stack depth: 7992 bytes left [ 109.584580][ T7942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.601048][ T7942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.628243][ T8124] batadv0: entered promiscuous mode [ 109.702170][ T8120] syzkaller0: entered promiscuous mode [ 109.707731][ T8120] syzkaller0: entered allmulticast mode [ 109.771365][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112a00800: rx timeout, send abort [ 109.779937][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a00800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 109.794515][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a00600: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 109.819226][ T8139] netlink: 'syz.1.1287': attribute type 1 has an invalid length. [ 109.827101][ T8139] netlink: 'syz.1.1287': attribute type 2 has an invalid length. [ 109.863128][ T8142] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 109.899462][ T29] audit: type=1400 audit(1719751719.562:2882): avc: denied { override_creds } for pid=8145 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.936163][ T8144] loop2: detected capacity change from 0 to 736 [ 109.977382][ T8144] rock: directory entry would overflow storage [ 109.983743][ T8144] rock: sig=0x5850, size=36, remaining=14 [ 110.013358][ T8154] bridge0: entered promiscuous mode [ 110.018769][ T8154] vlan2: entered promiscuous mode [ 110.026085][ T8154] bridge0: left promiscuous mode [ 110.071941][ T8162] loop2: detected capacity change from 0 to 1024 [ 110.079722][ T8162] EXT4-fs: Ignoring removed orlov option [ 110.085403][ T8162] EXT4-fs: Ignoring removed oldalloc option [ 110.091817][ T8162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.102194][ T8162] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.113178][ T8162] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 110.123888][ T8162] EXT4-fs (loop2): invalid journal inode [ 110.129636][ T8162] EXT4-fs (loop2): can't get journal size [ 110.147006][ T8162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.173458][ T29] audit: type=1326 audit(1719751719.842:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.4.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd35beb0b99 code=0x0 [ 110.255715][ T29] audit: type=1400 audit(1719751719.922:2884): avc: denied { watch } for pid=8169 comm="syz.0.1300" path="/proc/8169" dev="proc" ino=26137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 110.292502][ T8176] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 110.326422][ T8181] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.338630][ T8181] bond0: (slave hsr0): Error: Device can not be enslaved while up [ 110.349823][ T29] audit: type=1400 audit(1719751720.022:2885): avc: denied { execute_no_trans } for pid=8179 comm="syz.0.1303" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=25369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 110.534996][ T8188] lo speed is unknown, defaulting to 1000 [ 110.870065][ T8195] __nla_validate_parse: 3 callbacks suppressed [ 110.870082][ T8195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1306'. [ 110.906729][ T7942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.975305][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 110.985041][ T29] audit: type=1400 audit(1719751720.652:2886): avc: denied { read } for pid=8206 comm="syz.3.1309" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.017807][ T29] audit: type=1400 audit(1719751720.652:2887): avc: denied { open } for pid=8206 comm="syz.3.1309" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.023365][ T8211] nlmon0: entered promiscuous mode [ 111.042939][ T29] audit: type=1400 audit(1719751720.682:2888): avc: denied { getopt } for pid=8206 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.062128][ T8211] vlan2: entered promiscuous mode [ 111.085112][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112a00a00: rx timeout, send abort [ 111.093595][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a00a00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 111.108284][ C1] vxcan1: j1939_xtp_rx_cmd_bad_pgn: 0xffff888112a01a00: CMD 0xff with PGN 0x0ff00 for running session with different PGN 0x30000. [ 111.121819][ T8211] nlmon0: left promiscuous mode [ 111.143748][ T8214] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 111.362156][ T8228] loop3: detected capacity change from 0 to 256 [ 111.518086][ T8251] 9pnet_fd: Insufficient options for proto=fd [ 111.519824][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1322'. [ 111.571307][ T8253] nlmon0: entered promiscuous mode [ 111.576585][ T8253] vlan3: entered promiscuous mode [ 111.583637][ T8253] nlmon0: left promiscuous mode [ 111.610850][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.702194][ T8271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1330'. [ 111.770772][ T8281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1334'. [ 111.791284][ T29] audit: type=1400 audit(1719751721.452:2889): avc: denied { shutdown } for pid=8275 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.826814][ T8285] loop0: detected capacity change from 0 to 128 [ 111.917214][ T8289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1336'. [ 111.985402][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.004769][ T8296] 9pnet_virtio: no channels available for device [ 112.016517][ T8297] 9pnet_virtio: no channels available for device [ 112.029131][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.100884][ T8305] loop3: detected capacity change from 0 to 512 [ 112.118218][ T8305] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 112.137659][ T8305] EXT4-fs (loop3): 1 truncate cleaned up [ 112.151273][ T8311] 9pnet: Could not find request transport: rdmNr/2y0000000000000400 [ 112.173787][ T8305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.191953][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1345'. [ 112.374657][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888112a01a00: rx timeout, send abort [ 112.383230][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112a01a00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.431090][ T6230] bridge_slave_1: left allmulticast mode [ 112.436860][ T6230] bridge_slave_1: left promiscuous mode [ 112.442718][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.469493][ T6230] bridge_slave_0: left allmulticast mode [ 112.475208][ T6230] bridge_slave_0: left promiscuous mode [ 112.481023][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.512329][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.739176][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.749675][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.771154][ T6230] bond0 (unregistering): Released all slaves [ 112.781419][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1350'. [ 112.847790][ T8318] lo speed is unknown, defaulting to 1000 [ 112.940847][ T8350] dummy0: entered promiscuous mode [ 112.946155][ T8350] vlan2: entered promiscuous mode [ 112.979016][ T8350] dummy0: left promiscuous mode [ 113.046083][ T6230] hsr_slave_0: left promiscuous mode [ 113.064471][ T6230] hsr_slave_1: left promiscuous mode [ 113.073662][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.081268][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.104752][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.112362][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.135650][ T6230] veth1_macvtap: left promiscuous mode [ 113.141210][ T6230] veth0_macvtap: left promiscuous mode [ 113.141663][ T8357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1356'. [ 113.146806][ T6230] veth1_vlan: left promiscuous mode [ 113.161016][ T6230] veth0_vlan: left promiscuous mode [ 113.330145][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 113.351830][ T6230] team0 (unregistering): Port device team_slave_0 removed [ 113.585980][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 113.692322][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.699695][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.707531][ T8318] bridge_slave_0: entered allmulticast mode [ 113.725591][ T8318] bridge_slave_0: entered promiscuous mode [ 113.739875][ T8371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8371 comm=syz.3.1359 [ 113.753762][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.760986][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.778604][ T8318] bridge_slave_1: entered allmulticast mode [ 113.792461][ T8318] bridge_slave_1: entered promiscuous mode [ 113.848462][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.870927][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.911521][ T8318] team0: Port device team_slave_0 added [ 113.929796][ T8318] team0: Port device team_slave_1 added [ 113.947422][ T8375] loop3: detected capacity change from 0 to 512 [ 113.982549][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.989940][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.015873][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.059444][ T8375] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 114.067731][ T8375] EXT4-fs (loop3): 1 truncate cleaned up [ 114.074088][ T8375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.100100][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.107094][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.133072][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.297272][ T8318] hsr_slave_0: entered promiscuous mode [ 114.298605][ T6077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.318391][ T8318] hsr_slave_1: entered promiscuous mode [ 114.329078][ T8382] xt_socket: unknown flags 0x50 [ 114.335335][ T8318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.343534][ T8318] Cannot create hsr debugfs directory [ 114.371130][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 114.371147][ T29] audit: type=1326 audit(1719751724.042:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.420420][ T29] audit: type=1326 audit(1719751724.072:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.444217][ T29] audit: type=1326 audit(1719751724.072:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.456467][ T8394] loop0: detected capacity change from 0 to 128 [ 114.467622][ T29] audit: type=1326 audit(1719751724.072:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.467657][ T29] audit: type=1326 audit(1719751724.072:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.521519][ T29] audit: type=1326 audit(1719751724.072:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.545032][ T29] audit: type=1326 audit(1719751724.072:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.568628][ T29] audit: type=1326 audit(1719751724.072:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.592227][ T29] audit: type=1326 audit(1719751724.072:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.615790][ T29] audit: type=1326 audit(1719751724.072:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd12831db99 code=0x7ffc0000 [ 114.644056][ T8394] FAT-fs (loop0): Unrecognized mount option "0x00000000000000000xffffffffffffffff7?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 114.761956][ T8318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.776659][ T8410] dummy0: entered promiscuous mode [ 114.784361][ T8410] vlan3: entered promiscuous mode [ 114.802295][ T8410] dummy0: left promiscuous mode [ 114.835395][ T8415] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.844365][ T8415] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.853123][ T8415] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.861865][ T8415] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.919676][ T8417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1370'. [ 115.092304][ T8423] loop3: detected capacity change from 0 to 8192 [ 115.420829][ T8318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.458701][ T8463] loop0: detected capacity change from 0 to 512 [ 115.468411][ T8463] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1387: invalid indirect mapped block 256 (level 2) [ 115.483870][ T8463] EXT4-fs (loop0): Remounting filesystem read-only [ 115.491042][ T8463] EXT4-fs (loop0): 2 truncates cleaned up [ 115.497381][ T8463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.500740][ T8318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.513924][ T8463] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 115.527781][ T8463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.591659][ T8318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.671584][ T28] bridge_slave_1: left allmulticast mode [ 115.677420][ T28] bridge_slave_1: left promiscuous mode [ 115.683232][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.702171][ T28] bridge_slave_0: left allmulticast mode [ 115.707860][ T28] bridge_slave_0: left promiscuous mode [ 115.709035][ T8486] loop0: detected capacity change from 0 to 1024 [ 115.713625][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.767349][ T8486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c018, mo2=0002] [ 115.788556][ T8486] System zones: 0-1, 3-12 [ 115.802795][ T8486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.834871][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.845587][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.857808][ T28] bond0 (unregistering): Released all slaves [ 115.874416][ T8318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.895107][ T8318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.911087][ T8318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.920391][ T8318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.927862][ T7292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.973492][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.975327][ T8500] loop3: detected capacity change from 0 to 512 [ 115.987124][ T8318] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.002488][ T8500] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1395: corrupted in-inode xattr: bad e_name length [ 116.041586][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.048796][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.057734][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.064878][ T3167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.085275][ T8500] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1395: couldn't read orphan inode 15 (err -117) [ 116.087111][ T8505] loop0: detected capacity change from 0 to 512 [ 116.107538][ T28] hsr_slave_0: left promiscuous mode [ 116.114449][ T8500] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.128042][ T8505] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 116.136170][ T28] hsr_slave_1: left promiscuous mode [ 116.143444][ T8505] EXT4-fs (loop0): 1 truncate cleaned up [ 116.149944][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.157418][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.171720][ T8505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.186157][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.188445][ T8507] __nla_validate_parse: 1 callbacks suppressed [ 116.188462][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 116.193711][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.199795][ T8507] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1398'. [ 116.238214][ T6077] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 116.247538][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 116.277339][ T28] veth1_macvtap: left promiscuous mode [ 116.282918][ T28] veth0_macvtap: left promiscuous mode [ 116.288523][ T28] veth1_vlan: left promiscuous mode [ 116.293888][ T28] veth0_vlan: left promiscuous mode [ 116.380655][ T7292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.513789][ T28] team0 (unregistering): Port device team_slave_1 removed [ 116.537341][ T28] team0 (unregistering): Port device team_slave_0 removed [ 116.666673][ T8541] Process accounting resumed [ 116.756678][ T8318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.909119][ T8557] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.988495][ T8318] veth0_vlan: entered promiscuous mode [ 117.010773][ T8318] veth1_vlan: entered promiscuous mode [ 117.053719][ T8318] veth0_macvtap: entered promiscuous mode [ 117.055825][ T8318] veth1_macvtap: entered promiscuous mode [ 117.068674][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.068693][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.068734][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.068747][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.068759][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.068775][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.068791][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.068807][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.068926][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.068943][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.069825][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.072987][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.073004][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.073016][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.073039][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.073049][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.073062][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.073073][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.073115][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.073126][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.073139][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.073656][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.074627][ T8318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.074699][ T8318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.074806][ T8318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.074886][ T8318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.215377][ T8581] dummy0: entered promiscuous mode [ 117.215417][ T8581] vlan2: entered promiscuous mode [ 117.216705][ T8581] dummy0: left promiscuous mode [ 117.320152][ T8586] 9pnet_fd: Insufficient options for proto=fd [ 117.488086][ T8592] loop3: detected capacity change from 0 to 8192 [ 117.529980][ T8592] loop3: p1 p2 p4 [ 117.533802][ T8592] loop3: p1 size 108922248 extends beyond EOD, truncated [ 117.546656][ T8592] loop3: p2 start 861536256 is beyond EOD, truncated [ 117.553466][ T8592] loop3: p4 start 4194304 is beyond EOD, truncated [ 117.579236][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 117.596665][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'. [ 117.605664][ T8600] netlink: 7248 bytes leftover after parsing attributes in process `syz.4.1421'. [ 117.657258][ T8586] loop3: detected capacity change from 0 to 512 [ 117.677587][ T8586] EXT4-fs (loop3): 1 truncate cleaned up [ 117.696713][ T8586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.719731][ T8586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.842510][ T8616] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1426'. [ 118.065859][ T8627] dummy0: entered promiscuous mode [ 118.072468][ T8627] vlan3: entered promiscuous mode [ 118.079896][ T8627] dummy0: left promiscuous mode [ 118.101539][ T8633] loop2: detected capacity change from 0 to 2048 [ 118.149891][ T8633] loop2: p1 < > p4 [ 118.158878][ T8633] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.328121][ T8643] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1437'. [ 118.329676][ T8645] loop3: detected capacity change from 0 to 512 [ 118.346228][ T8645] ext4: Unknown parameter 'uid>00000000000000000000' [ 118.627850][ T8661] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1444'. [ 118.643851][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 118.673334][ T8667] ================================================================== [ 118.681486][ T8667] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru_vma [ 118.689513][ T8667] [ 118.691852][ T8667] read-write to 0xffff888237c2ac08 of 1 bytes by task 8665 on cpu 0: [ 118.699930][ T8667] folio_add_lru_vma+0x74/0x170 [ 118.704893][ T8667] do_wp_page+0x1728/0x22b0 [ 118.709428][ T8667] handle_mm_fault+0xb9b/0x2a80 [ 118.714400][ T8667] exc_page_fault+0x3b9/0x650 [ 118.719105][ T8667] asm_exc_page_fault+0x26/0x30 [ 118.723989][ T8667] [ 118.726326][ T8667] read to 0xffff888237c2ac08 of 1 bytes by task 8667 on cpu 1: [ 118.734079][ T8667] __lru_add_drain_all+0x12c/0x410 [ 118.739220][ T8667] lru_add_drain_all+0x10/0x20 [ 118.744046][ T8667] memfd_fcntl+0x7a9/0xc20 [ 118.748583][ T8667] do_fcntl+0x484/0xe20 [ 118.752766][ T8667] __se_sys_fcntl+0xc4/0x190 [ 118.757648][ T8667] __x64_sys_fcntl+0x43/0x50 [ 118.762361][ T8667] x64_sys_call+0x292f/0x2d70 [ 118.767093][ T8667] do_syscall_64+0xc9/0x1c0 [ 118.771756][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.777688][ T8667] [ 118.780018][ T8667] value changed: 0x00 -> 0x01 [ 118.784790][ T8667] [ 118.787120][ T8667] Reported by Kernel Concurrency Sanitizer on: [ 118.793288][ T8667] CPU: 1 PID: 8667 Comm: syz.3.1446 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 118.803388][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 118.813462][ T8667] ================================================================== [ 118.830369][ T8671] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0