last executing test programs: 5.357592078s ago: executing program 4 (id=4385): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) pipe2$9p(0x0, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$eJzs3b+LHHUUAPA3d7O74w/YLaxEcEALq5BLa7NBEhCvMmyhFnqYBOR2ERI48AeOqcTOxtK/QBD8H2xt7CwF/wA7IwRGZnbmdtZM9u7k9sTc59PkZb7vzffN7HA3V9y7D15aHN7O4+6Dz3+LLEtiZxrTeJjEJHai9WWsmX4TAMD/2cOyjD/KpZ7lX79+Ql0SEdmWewMAtuOE7/+NdBX+eCFtAQBbdOudd9+6vr9/4+08z+Lm4qujWfWTffXvcv363fgo5nEnrsY4HkXULwqDqN8WqvBmWZZFmlcm8eqiOJpVlYv3f27O/9PzTbAX45jU0fHbRl3/5v6NvXypU19UfTzb7D+t9r8W43jhuHit/lpPfcyG8dornf6vxDh++TA+jnncrptY1X+xl+dvlN/++dl7VXtVfVIczUZ13kq5225eXODnAwAAAAAAAAAAAAAAAAAAAADA0+lKMztnFPX8nupQM39n91H1n0Hkrcn6fJ5lfdKeqDsfqCzLoozv2vk6V/M8L5vEVX0aL6bdwYIAAAAAAAAAAAAAAAAAAABwed3/5NPDg/n8zr1zCdppAGlE/HUr4t+eZ9o58nJsTh41ex7M5ztNuJ6Tdo/EbpuTRGxso7qIc7otJwXPPNZzE3z/Q29VuvbBpdFZyk7edNC/13kG7dN1eJD038PRcc/Z8iGpB0GscoZxyr2GT1oq4yyP37B3aXzmax8+VwfFhpxINjX2+u/LO9ccSf55FcP6rvaWD5qgU76ek53qeY5sWf7414rEtA4AAAAAAAAAAAAAAAAAANiq1W//9iw+2Fi6U4621hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXKjV3/8/Q1A0xadIHsa9+//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAJ/B0AAP//eWdglQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x6a00000000000000}, 0x0) 5.250812106s ago: executing program 4 (id=4388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x480}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.20158153s ago: executing program 4 (id=4390): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000006c0)={[{@resgid}, {@data_writeback}, {@sb={'sb', 0x3d, 0xe441}}, {@usrquota}, {@grpjquota}, {@discard}, {@data_ordered}]}, 0x1, 0x4f4, &(0x7f0000000f00)="$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") 5.180166242s ago: executing program 4 (id=4391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x4c}, [@snprintf={{}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 5.165098433s ago: executing program 4 (id=4392): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000950000000000000000009e4d02bb500fbd93e72f4d8d9f8e249ccdc343db2ec06a8aaa508bda26f7d21fd11deec3d55ddc0ae859c1a63ab98bb6333f01fca4087afa835f11457c67879799c335e843549ee096593e0ee26c4d0ef4e9c64d280bcf0815b63a35f8d7a5067ea7cdcac76a03258bb80e8124273f04329b119a588212f47cb30a7186dcc5be1b867a992c2cb4ea411752c381000000c786e8a2a9ed84c89da6effbb97ded0aa15e5a0288eb4ded9e22d79b3f02a9"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x17, 0x0, @val=@netkit={@prog_id}}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=@newqdisc={0xd0, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xf}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x4, 0x2, 0x0, 0x5, 0x0, 0x2}}, {0x8, 0x2, [0x7, 0x101]}}, {{0x1c, 0x1, {0x40, 0x7, 0x83, 0x6, 0x0, 0x7, 0x3, 0x3}}, {0xa, 0x2, [0x9a52, 0x0, 0x100]}}, {{0x1c, 0x1, {0x3, 0x2, 0xfb6d, 0x8, 0x0, 0x2, 0x7375, 0x2}}, {0x8, 0x2, [0x6, 0x3]}}, {{0x1c, 0x1, {0xdf, 0xf7, 0x4, 0x80000001, 0x0, 0x6, 0x925, 0x5}}, {0xe, 0x2, [0x6, 0x3, 0x100, 0x0, 0x8]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x2, 0x0, 0x0, 0x96303029bd571553, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x8000, 0x186}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000240)=""/60, 0x3c}], 0x1, 0x0, 0x0) pread64(r6, &(0x7f0000000380)=""/5, 0x5, 0x108) chdir(&(0x7f0000000380)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r7, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x6, 0x0) bind$inet(r9, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x0, @loopback=0xac141436}, 0x10) r10 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x80000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4, @ANYRES64=r10, @ANYRESOCT=r3], 0x0, 0x5}, 0x90) 5.097550469s ago: executing program 4 (id=4393): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x73000000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 3.292756595s ago: executing program 3 (id=4420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x700000000000000}, 0x0) 3.264126516s ago: executing program 3 (id=4421): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = epoll_create(0x2a) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x2}]}}, 0x0, 0x26}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000440)={0x0, 0x1d, '\x00', [@ra, @jumbo, @generic={0x0, 0x53, "7938911bce3804dd0e46cc0b08d105b5bdee012d166907ae998d64b9859dd04c59ed814229bfc31a3f24c7faeacf7b78d6df896154fdb3218d3b76b8391e3e42f8c39b819280c74736f055293f65c907e2b70b"}, @hao={0xc9, 0x10, @loopback}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x67, "00f5901897290e12b0a3ec0ebafd39dcc813d8f04ba16c9f0f09d15867240ae1e6a4e75be9fb0f53831d47a5bae487fb71173b9ef83605efc52add3ea1faa5f1e613adaefebde6e757825bc41629969d2b9de7a1466dc30afbf055cf8b7899c4cf73f76f55f2ce"}]}, 0xf0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x32, 0x4, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x45, 0x2, [0x6, 0xc]}}, @jumbo={0xc2, 0x4, 0x4}]}, 0x28) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x2, 0x81) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r4, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 3.149608136s ago: executing program 3 (id=4422): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff040000", @ANYBLOB], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x12000000}, 0x0) 3.132193307s ago: executing program 3 (id=4423): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[@ANYBLOB="84010000100033060000000000000000ac1414bb000000000000000000000000ac1414aa0000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"], 0x184}}, 0x0) 3.074941722s ago: executing program 3 (id=4424): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001b40)=0x800) r1 = dup(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, 0x1, 0x4, 0x0, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) io_setup(0x7f, &(0x7f0000000100)=0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f0000001940)={'filter\x00', 0x0, 0x4, 0x1000, [0xb529, 0x8000000000000001, 0x61, 0x5, 0x1, 0x401], 0x5, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], &(0x7f0000000940)=""/4096}, &(0x7f00000019c0)=0x78) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48060}, 0x40084) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x364, r7, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x5, 0x4, 0x0, 0x3ff}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xff, 0x0, 0xc, 0xa, 0xe53, 0x40, 0x7, 0xc, 0x6, 0x7abf, 0x7, 0x0, 0x3, 0x9, 0xfffd, 0x5]}, @NL80211_ATTR_IE={0x2f, 0x2a, [@challenge={0x10, 0x1, 0x8a}, @mesh_chsw={0x76, 0x6, {0x41, 0x10, 0x28}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0xdb}, @channel_switch={0x25, 0x3, {0x1, 0xb7, 0xf}}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0xfb}, @channel_switch={0x25, 0x3, {0x0, 0xaf, 0x3}}]}, @NL80211_ATTR_IE={0x1d5, 0x2a, [@fast_bss_trans={0x37, 0xae, {0x7, 0x3, "9b5ad13111efc293bec51d5b5c4778a7", "c0e2965b58753b4c49e56c54cd0958ed49ce2289d5cc2b50ff7f99f1a769a279", "a0cd13e26bd0ec63da61aea7ca78998e41a374caa1fc5519d2a98f3e158c5580", [{0x2, 0x26, "62ba27c7c970a0e53eab29a5230c052c88daf8a5d25e06aeda8ffa6d293f6a1e82ff3e3aa42e"}, {0x3, 0x14, "0540eb8a8b5be3ded79aaafb4f8ba67d382037ab"}, {0x3, 0x1c, "ee584aa966fbe5e13f7b8dfca0a24f57046b0d5c87fab55d9d5038ba"}]}}, @perr={0x84, 0xf, {0x9a, 0x1, [{{}, @device_b, 0x2, @void, 0x1a}]}}, @fast_bss_trans={0x37, 0x7a, {0x5, 0x3, "9ffc7c2669aceb0e5be3a322c6c7a7e0", "b475280523f2d014bf6c1443413dd50672b6d1241430abb0283749573fa15dfe", "dff3bbe28f782d0c825f8bec451922783f752e2cabf4321b6448ff1dca6355ef", [{0x2, 0xe, "02ace34ae7f11f72aad922934ccb"}, {0x3, 0x12, "2aaf9d4e2fd34a6180e2d08084186de1a1f1"}, {0x1, 0x2, "8653"}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1f, 0xb, 0xa}}, @measure_req={0x26, 0x8c, {0x0, 0x9, 0x4a, "93f5cd3585f66291cd271b377d3bbdc03a9021f9c2db40469cff12e61507aecdbf94b4df2a04e1f514769903dd1e88b41da590bf13a6389c8bb1ecae07d233a64abdf7adac113b18e1bbc4abe05bb3d80eb8d35e6d69812f9b1239552d39fb7db3b718d4a03a31c7ebeef69c6fc9a6ff4723ec3ace170281f1235cd65808ed0313994bfc738898109b"}}]}, @NL80211_ATTR_DISABLE_HT={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_PMK={0x42, 0xfe, "ddf439aa85dd37c8347edac572b71cd9cba57a5bbd583441749509a3fcdca24fc9b1f2095ae49832a0715b2fad2f6526b776e45ecc99369029d650fd804f"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac09, 0xfac04, 0xfac06]}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac06, 0xfac03, 0x0, 0x8434e0e3e13c8434, 0xfac03, 0xfac01]}, @NL80211_ATTR_SAE_PASSWORD={0x64, 0x115, "ff55fe1b4a1698eb56f339591b7793b6c4afdc44a01d173cfe5533cdf7a661b55a4dd186790936576dce19888a3884a94db38b6fe626d20767556835ac090c180938d73522b224dce84aef0f818c292ad7ee659e82bbcd6a7e5f78d62c39b812"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac01, 0xfac0c, 0xfac09, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8808}]]}, 0x364}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) io_submit(r6, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x20}]) 2.949637242s ago: executing program 3 (id=4425): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000012000100000008000a00", @ANYRES32=0x0, @ANYBLOB="050027000000000008000500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31", @ANYBLOB], 0x15c}}, 0x0) 1.578160593s ago: executing program 0 (id=4442): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xff80], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) 1.559250184s ago: executing program 0 (id=4443): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x0, 0x2002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0x60, [0x5, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffa, 0x80000001, 0x10000], 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/96}, &(0x7f00000001c0)=0x78) r6 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080ffffff00000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x0) 553.378845ms ago: executing program 0 (id=4446): epoll_create1(0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) lseek(r2, 0x1293800000000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/arp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x6, 0xa]}}], 0x1c) dup3(r4, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000180)={@broadcast, @private=0xa010100, @multicast2}, 0xc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) 297.148466ms ago: executing program 1 (id=4452): chdir(0x0) syz_open_dev$sg(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0) rseq(0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f0000000200)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@mblk_io_submit}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@grpjquota, 0x22}, {@block_validity}, {@errors_remount}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}, {@nogrpid}]}, 0xfe, 0x45b, &(0x7f0000000d80)="$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") 162.397037ms ago: executing program 0 (id=4453): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = getpid() r5 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000080)={r5}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8000, 0x2, 0x4, 0xc2d}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) write$sndseq(r7, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x508a, 0x5, 0x7, 0x3}) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) accept(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}, 0x1, 0x4788}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) 161.798117ms ago: executing program 0 (id=4454): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x62) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x878) syz_open_procfs(0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xf6ffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 109.699741ms ago: executing program 2 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000340)=@framed={{}, [@btf_id]}, 0x0, 0x0, 0xffd, &(0x7f0000001380)=""/4093}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40000f000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x12}, 0x0) 107.479381ms ago: executing program 1 (id=4457): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112ad0000000000bf201000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 107.247921ms ago: executing program 2 (id=4458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000380)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r7, 0x200, 0x4000010}, 0x14}, 0x1, 0x0, 0x0, 0x6000810}, 0x40) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042abd7000fddbdf251600000044000380080001000004000008020008000000080003004b0b0000080001000500000008000100000000000800000000000100000002009ea400"/82], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) vmsplice(r9, &(0x7f0000001740)=[{&(0x7f0000000340)="de", 0x1}], 0x1, 0xa) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r12 = dup2(r11, r10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x85, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000280000cb13b7c6f2d8994718b48b81525b4f097fd390b36e9d12891aaaf4b4294b90b52b776b6d933e28ac8aabf97f550657eb19123c060f0800ffa102364941c1b775775e195c8a60dd01bc9fa3b28b5b596be8942d02451bffc7a7818f2229c73e974f", @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c00030000000000000000000c000400ffffffffffffffff"], 0x30}}, 0x0) 107.061891ms ago: executing program 1 (id=4459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000005efbaea6202c818c0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r1, 0x0, &(0x7f0000000400)=""/36}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60cff7f500003200000000000000000000000000000000000000000000aa68b37ccf1d3f9251fed2806bc3cf6e51cc7f10a7345021be7dcea3908ce5cd3ac10cd37de0829aaa3608293ee091142bfb0000"], 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f00002f5000/0x3000)=nil, 0x3000, 0xa, 0x110, r2, 0xa3155000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) gettid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x1100000000000000) 105.882501ms ago: executing program 1 (id=4460): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000004200)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000002000000000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000257000/0x3000)=nil, 0x3000, 0x2, 0x810, 0xffffffffffffffff, 0xa289000) socketpair$unix(0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x358, 0x0, 0xb8, 0xfeffffff, 0x0, 0x170, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_macvtap\x00'}, 0x3e7, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@mcast1, @gre_key}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'bond0\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4, @icmp_id, @gre_key}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'vlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @gre_key, @icmp_id}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'macvlan0\x00', 'erspan0\x00', {}, {}, 0x1d00}, 0x0, 0x70, 0xa8, 0x9cffffff}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 105.755801ms ago: executing program 2 (id=4461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000108000000000000000088a80000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 76.740994ms ago: executing program 0 (id=4462): setresuid(0xee01, 0xee01, 0x0) r0 = getuid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7ab0715dca68fe47, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) r2 = getuid() r3 = eventfd2(0x0, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_pgetevents(r4, 0x6, 0x6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) io_submit(r4, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r8, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r9 = syz_io_uring_setup(0x24f8, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xe}}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2000}) io_uring_enter(r9, 0x7f0e, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, r0, r2) r13 = socket$inet6(0xa, 0x6, 0x83a) setsockopt$inet6_int(r13, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r13, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) bind$inet6(r13, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaf536656008f786dd6000000000403a00fe800000000000000000000000000000ff4133739cf8903e0800001000000001030090780000000060780fd720000000ff02000000000000000000000000000120010000000000000000000000006781c850aaa38c1900004ccddd2f204c1adf9a03f1ec3589"], 0x0) 25.641778ms ago: executing program 2 (id=4463): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0xffc}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, 0x2a, 0xc01, 0x0, 0x0, {0x7}}, 0x4f}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'pimreg1\x00', 0x2}) 25.296418ms ago: executing program 1 (id=4464): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000140)='./bus\x00', 0x14937e, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f0000000012000001ff000900"}) 24.346188ms ago: executing program 2 (id=4465): r0 = socket(0x0, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000004400)=[{{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000000)=""/24, 0x18}], 0x2, &(0x7f0000001200)=""/193, 0xc1}}, {{&(0x7f0000001300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001380)=""/174, 0xae}, {&(0x7f0000001440)=""/247, 0xf7}], 0x2, &(0x7f0000001540)=""/208, 0xd0}}, {{&(0x7f0000001640)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/121, 0x79}, {&(0x7f0000001740)=""/194, 0xc2}, {&(0x7f0000001840)=""/33, 0x21}, {&(0x7f0000001880)=""/51, 0x33}, {&(0x7f00000018c0)=""/81, 0x51}, {&(0x7f0000001940)=""/239, 0xef}], 0x6}, 0xbe5}, {{&(0x7f0000001ac0)=@un=@abs, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/127, 0x7f}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/83, 0x53}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000004580)=""/110, 0x6e}, {&(0x7f0000001e40)=""/138, 0x8a}], 0x6, &(0x7f0000001f80)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002f80)=""/248, 0xf8}, {&(0x7f0000003080)=""/237, 0xed}, {&(0x7f0000003180)=""/27, 0x1b}, {&(0x7f00000031c0)=""/15, 0xf}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/13, 0xd}, {&(0x7f0000004540)=""/25, 0x19}], 0x7, &(0x7f0000004300)=""/244, 0xf4}}], 0x5, 0x88a8ffffffffffff, &(0x7f00000001c0)={0x77359400}) 10.836359ms ago: executing program 1 (id=4466): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (async) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x6d05, 0x0) (async) tee(r3, r4, 0x6d05, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec5000065d100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, r4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000002c0)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40009001d2b2c25fe80000000000000dc05000f238466cc0500000000000000911b51818462b4003a000001914b53b24e34bd22f2abe48fa3bc5b2e1c20995d7b9c5d", 0x43}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40009001d2b2c25fe80000000000000dc05000f238466cc0500000000000000911b51818462b4003a000001914b53b24e34bd22f2abe48fa3bc5b2e1c20995d7b9c5d", 0x43}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="100001800400048008000100000001"], 0x28}, 0x1, 0x1000000000000000}, 0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000000c0)="2cd360806d2a5c6760443d901cf6bcc7c36c31962c534791358bce601b667473b4bac321420422623e951733d00efbbfe91853008ee1f67360431fe913aa2a0796e9e3065634a0ab9e4176") syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) (async) r9 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, {0x0, r12}}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r13, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a8435002c0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0000000907804001e1044030200000000000000100000000204050002040700"], 0x0) (async) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a8435002c0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0000000907804001e1044030200000000000000100000000204050002040700"], 0x0) 0s ago: executing program 2 (id=4467): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nombcache}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r3, 0x3f, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x20}]) kernel console output (not intermixed with test programs): range [ 205.102037][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 205.102410][T16796] netlink: zone id is out of range [ 205.114339][T16796] netlink: zone id is out of range [ 205.119460][T16796] netlink: set zone limit has 8 unknown bytes [ 205.154673][T16794] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 205.161723][T16794] dvmrp1: linktype set to 0 [ 205.173415][T16807] loop4: detected capacity change from 0 to 1024 [ 205.192234][T16807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.215048][T16807] FAULT_INJECTION: forcing a failure. [ 205.215048][T16807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.228224][T16807] CPU: 0 PID: 16807 Comm: syz.4.3791 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 205.238440][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.248525][T16807] Call Trace: [ 205.251840][T16807] [ 205.254773][T16807] dump_stack_lvl+0xf2/0x150 [ 205.259639][T16807] dump_stack+0x15/0x20 [ 205.263889][T16807] should_fail_ex+0x229/0x230 [ 205.268592][T16807] should_fail+0xb/0x10 [ 205.272809][T16807] should_fail_usercopy+0x1a/0x20 [ 205.277934][T16807] _copy_from_user+0x1e/0xd0 [ 205.282546][T16807] io_submit_one+0x54/0x1240 [ 205.287220][T16807] ? __rcu_read_unlock+0x4e/0x70 [ 205.292217][T16807] __se_sys_io_submit+0xf5/0x280 [ 205.297453][T16807] __x64_sys_io_submit+0x43/0x50 [ 205.302434][T16807] x64_sys_call+0x2ab5/0x2d70 [ 205.307285][T16807] do_syscall_64+0xc9/0x1c0 [ 205.311801][T16807] ? clear_bhb_loop+0x55/0xb0 [ 205.316722][T16807] ? clear_bhb_loop+0x55/0xb0 [ 205.321488][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.327392][T16807] RIP: 0033:0x7ff2ab189bd9 [ 205.331811][T16807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.351499][T16807] RSP: 002b:00007ff2aa40b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 205.359918][T16807] RAX: ffffffffffffffda RBX: 00007ff2ab317f60 RCX: 00007ff2ab189bd9 [ 205.367983][T16807] RDX: 0000000020000380 RSI: 0000000000000002 RDI: 00007ff2ab2eb000 [ 205.376017][T16807] RBP: 00007ff2aa40b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.384110][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.392085][T16807] R13: 000000000000000b R14: 00007ff2ab317f60 R15: 00007fff87c00fa8 [ 205.400104][T16807] [ 205.410009][T16744] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.417299][T16744] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.428523][T16744] bridge_slave_0: entered allmulticast mode [ 205.437708][T16744] bridge_slave_0: entered promiscuous mode [ 205.445277][T16744] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.446398][T16828] loop0: detected capacity change from 0 to 1024 [ 205.452539][T16744] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.466019][T16744] bridge_slave_1: entered allmulticast mode [ 205.472955][T16744] bridge_slave_1: entered promiscuous mode [ 205.491410][T16744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.505588][T16744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.524697][T14615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.541274][T16744] team0: Port device team_slave_0 added [ 205.549679][T16744] team0: Port device team_slave_1 added [ 205.560695][T16833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3800'. [ 205.584410][T16744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.591573][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.617615][T16744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.633010][T16744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.640019][T16744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.666004][T16744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.681269][T16839] gretap0: refused to change device tx_queue_len [ 205.688592][T16839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 205.736008][T16844] loop0: detected capacity change from 0 to 2048 [ 205.752791][T16744] hsr_slave_0: entered promiscuous mode [ 205.763672][T16744] hsr_slave_1: entered promiscuous mode [ 205.772900][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 205.811502][T16859] loop1: detected capacity change from 0 to 1024 [ 205.836944][T16859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.877870][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3810'. [ 205.931160][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.014398][T16872] loop0: detected capacity change from 0 to 512 [ 206.071632][T16883] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 206.091953][T16883] team0: Device ipvlan2 failed to register rx_handler [ 206.132655][T16885] syzkaller0: left promiscuous mode [ 206.137917][T16885] syzkaller0: left allmulticast mode [ 206.176506][T16744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.192064][T16744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.206938][T16744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.221337][T16744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.253057][T16744] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.260335][T16744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.267726][T16744] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.274829][T16744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.301405][T16894] loop0: detected capacity change from 0 to 736 [ 206.316672][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.325805][T16894] rock: directory entry would overflow storage [ 206.332032][T16894] rock: sig=0x3b10, size=4, remaining=3 [ 206.339272][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.426005][T16744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.454871][T16744] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.471264][T16901] loop3: detected capacity change from 0 to 2048 [ 206.488103][T14167] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.495217][T14167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.498894][T16901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.520259][T16901] EXT4-fs: Ignoring removed nobh option [ 206.526332][T14167] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.533440][T14167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.561154][T16744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.571898][T16744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.600011][T16901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.692428][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 206.736683][T16901] xfrm0: entered promiscuous mode [ 206.741905][T16901] xfrm0: entered allmulticast mode [ 206.758865][ T29] kauditd_printk_skb: 6373 callbacks suppressed [ 206.758882][ T29] audit: type=1326 audit(1720401491.946:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.788500][ T29] audit: type=1326 audit(1720401491.946:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.811827][ T29] audit: type=1326 audit(1720401491.955:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.835280][ T29] audit: type=1326 audit(1720401491.955:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.858861][ T29] audit: type=1326 audit(1720401491.955:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.882398][ T29] audit: type=1326 audit(1720401491.955:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.905800][ T29] audit: type=1326 audit(1720401491.955:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.929130][ T29] audit: type=1326 audit(1720401491.955:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.952527][ T29] audit: type=1326 audit(1720401491.955:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 206.959929][T16744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.975844][ T29] audit: type=1326 audit(1720401491.955:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ab189bd9 code=0x50000 [ 207.019157][T10039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.322157][T16935] loop0: detected capacity change from 0 to 1024 [ 207.348188][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 207.349655][T16744] veth0_vlan: entered promiscuous mode [ 207.381268][T16937] loop1: detected capacity change from 0 to 1024 [ 207.397911][T16744] veth1_vlan: entered promiscuous mode [ 207.424179][T16945] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3839'. [ 207.433513][T16945] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3839'. [ 207.445682][T16744] veth0_macvtap: entered promiscuous mode [ 207.464990][T16744] veth1_macvtap: entered promiscuous mode [ 207.481245][T16945] bond0: option mode: unable to set because the bond device has slaves [ 207.493303][T16937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.512589][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.523303][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.533185][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.543725][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.553651][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.564088][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.573910][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.584371][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.594290][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.604896][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.673412][T16958] loop0: detected capacity change from 0 to 1024 [ 207.734705][T16744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.758390][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.773038][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.783827][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.793756][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.804394][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.814250][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.824713][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.830205][T16971] loop0: detected capacity change from 0 to 128 [ 207.834640][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.834661][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.834684][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.871806][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.881724][T16744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.892184][T16744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.903818][T16744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.916080][T16744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.924854][T16744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.933727][T16744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.942530][T16744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.988080][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3847'. [ 207.997195][T16975] tipc: Started in network mode [ 208.002053][T16975] tipc: Node identity ., cluster identity 8 [ 208.073599][T16980] tipc: Enabled bearer , priority 10 [ 208.083558][T16980] tipc: Resetting bearer [ 208.131068][T16980] tipc: Disabling bearer [ 208.160817][T16986] IPv6: Can't replace route, no match found [ 208.211697][T16992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3853'. [ 208.323575][T17017] loop0: detected capacity change from 0 to 512 [ 208.351979][T17017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.361653][T17017] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.3862: iget: special inode unallocated [ 208.373890][T17017] EXT4-fs (loop0): get root inode failed [ 208.379527][T17017] EXT4-fs (loop0): mount failed [ 208.441262][T17020] pim6reg: entered allmulticast mode [ 208.455832][T17023] 9pnet: Could not find request transport: fd0x0000000000000004 [ 208.527310][T17032] loop0: detected capacity change from 0 to 128 [ 208.607166][T17036] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 208.646917][T17036] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.770811][T17050] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 208.786923][T17050] macsec1: entered allmulticast mode [ 208.792284][T17050] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 208.870942][T17059] loop3: detected capacity change from 0 to 1024 [ 208.887743][T17059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.930592][T17037] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 208.964822][T17067] __nla_validate_parse: 9 callbacks suppressed [ 208.964837][T17067] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3878'. [ 209.018787][T10039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.031670][T17071] loop0: detected capacity change from 0 to 256 [ 209.035536][T17067] infiniband syz: set down [ 209.042468][T17067] infiniband syz: added ipvlan0 [ 209.063617][T17067] RDS/IB: syz: added [ 209.067783][T17067] smc: adding ib device syz with port count 1 [ 209.072562][T17078] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3883'. [ 209.073972][T17067] smc: ib device syz port 1 has pnetid [ 209.118159][T17071] geneve2: entered promiscuous mode [ 209.123539][T17071] geneve2: entered allmulticast mode [ 209.190643][T17087] 9pnet_fd: Insufficient options for proto=fd [ 209.232135][T17089] netlink: 'syz.0.3887': attribute type 8 has an invalid length. [ 209.351850][T17093] netlink: 'syz.4.3889': attribute type 1 has an invalid length. [ 209.359709][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 209.396695][T17102] sctp: [Deprecated]: syz.0.3893 (pid 17102) Use of int in maxseg socket option. [ 209.396695][T17102] Use struct sctp_assoc_value instead [ 209.482823][T17107] loop4: detected capacity change from 0 to 256 [ 209.486426][T17100] loop3: detected capacity change from 0 to 8192 [ 209.494783][T17107] FAT-fs (loop4): Unrecognized mount option "nodo" or missing value [ 209.588520][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 209.645773][T17128] 9pnet_fd: Insufficient options for proto=fd [ 209.665272][T17133] dccp_invalid_packet: P.Data Offset(172) too large [ 209.715565][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3907'. [ 209.768037][T17144] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.839681][T17151] loop4: detected capacity change from 0 to 1024 [ 209.852907][T17151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.853316][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3913'. [ 209.895995][T17157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3915'. [ 209.897055][T17158] Cannot find add_set index 0 as target [ 209.946114][T17168] loop3: detected capacity change from 0 to 128 [ 209.954670][T17168] FAT-fs (loop3): invalid media value (0x00) [ 209.960760][T17168] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 209.969970][T17168] FAT-fs (loop3): Can't find a valid FAT filesystem [ 209.977114][T14615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.000290][T17166] loop1: detected capacity change from 0 to 4096 [ 210.008672][T17166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.038015][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.054585][T17174] futex_wake_op: syz.3.3922 tries to shift op by -1; fix this program [ 210.106851][T17185] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 210.192476][T17194] 9pnet_fd: Insufficient options for proto=fd [ 210.200168][T17196] netlink: 'syz.1.3928': attribute type 11 has an invalid length. [ 210.208125][T17196] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3928'. [ 210.270972][T17191] loop3: detected capacity change from 0 to 8192 [ 210.283805][T17191] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.304491][T17198] loop1: detected capacity change from 0 to 1764 [ 210.430095][T17213] loop1: detected capacity change from 0 to 1024 [ 210.430601][T17212] tipc: Enabling of bearer rejected, failed to enable media [ 210.440763][T17213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.462706][T17213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.474626][T17220] loop4: detected capacity change from 0 to 512 [ 210.475379][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 210.496605][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.515603][T17220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 210.530707][T17220] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.568923][T14615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 210.593314][T17229] loop1: detected capacity change from 0 to 512 [ 210.619619][T17229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 210.640946][T17229] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.658614][T17240] 9pnet_fd: Insufficient options for proto=fd [ 210.666629][T17242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3939'. [ 210.730168][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 210.947936][T17262] net_ratelimit: 1 callbacks suppressed [ 210.947956][T17262] netlink: zone id is out of range [ 210.958740][T17262] netlink: zone id is out of range [ 210.963890][T17262] netlink: zone id is out of range [ 210.969006][T17262] netlink: zone id is out of range [ 211.039390][T17268] loop1: detected capacity change from 0 to 1764 [ 211.103143][T17262] netlink: zone id is out of range [ 211.108541][T17262] netlink: zone id is out of range [ 211.113703][T17262] netlink: set zone limit has 8 unknown bytes [ 211.139710][T17272] vlan0: entered allmulticast mode [ 211.380412][T17276] vlan2: entered promiscuous mode [ 211.385950][T17276] batman_adv: batadv0: Adding interface: vlan2 [ 211.392146][T17276] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.417736][T17276] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 211.455862][T17280] loop0: detected capacity change from 0 to 1024 [ 211.508910][T17289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=17289 comm=syz.3.3962 [ 211.552088][T17288] 9pnet_fd: Insufficient options for proto=fd [ 211.577081][T17294] loop1: detected capacity change from 0 to 1024 [ 211.586278][T17294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.629518][T17305] 0ªX¹¦D: refused to change device tx_queue_len [ 211.636813][T17305] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 211.652808][T17303] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 211.660571][T17303] dvmrp1: linktype set to 0 [ 211.703292][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.712834][T17309] openvswitch: netlink: Port -11788628 exceeds max allowable 65535 [ 211.789527][T17327] 9pnet_fd: Insufficient options for proto=fd [ 211.876671][T17340] loop1: detected capacity change from 0 to 1024 [ 211.898850][T17340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.995603][T17354] loop4: detected capacity change from 0 to 2048 [ 212.027421][T17354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.043389][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.075946][T17361] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 212.090212][T17361] dvmrp1: linktype set to 0 [ 212.190879][ T29] kauditd_printk_skb: 9340 callbacks suppressed [ 212.190939][ T29] audit: type=1400 audit(1720401496.977:18350): avc: denied { getopt } for pid=17370 comm="syz.1.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.233916][T14615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.248360][ T29] audit: type=1326 audit(1720401497.023:18351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.272105][ T29] audit: type=1326 audit(1720401497.023:18352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.296138][ T29] audit: type=1326 audit(1720401497.023:18353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.319929][ T29] audit: type=1326 audit(1720401497.023:18354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.343626][ T29] audit: type=1326 audit(1720401497.023:18355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.367533][ T29] audit: type=1326 audit(1720401497.023:18356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.391402][ T29] audit: type=1326 audit(1720401497.023:18357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.415130][ T29] audit: type=1326 audit(1720401497.023:18358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.438754][ T29] audit: type=1326 audit(1720401497.023:18359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2d11aa4bd9 code=0x7ffc0000 [ 212.496445][T17381] vlan0: entered promiscuous mode [ 212.523371][T17385] xt_NFQUEUE: number of total queues is 0 [ 212.543028][T17387] loop1: detected capacity change from 0 to 1024 [ 212.559261][T17387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.693158][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.874764][T17412] loop3: detected capacity change from 0 to 2048 [ 212.881676][T17412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.888692][T17412] EXT4-fs: Ignoring removed nobh option [ 212.905681][T17412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.939468][T10039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.980652][T17427] vhci_hcd: invalid port number 72 [ 212.985875][T17427] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 213.112923][T17443] loop0: detected capacity change from 0 to 1024 [ 213.320886][ T4199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.479554][ T4199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.511545][T17455] loop0: detected capacity change from 0 to 512 [ 213.564824][ T4199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.621235][ T4199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.636342][T17474] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.648930][T17474] bridge_slave_0: default FDB implementation only supports local addresses [ 213.686327][T17482] loop4: detected capacity change from 0 to 1024 [ 213.697476][T17482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.717807][ T4199] bridge_slave_1: left allmulticast mode [ 213.723498][ T4199] bridge_slave_1: left promiscuous mode [ 213.729287][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.737953][ T4199] bridge_slave_0: left allmulticast mode [ 213.743696][ T4199] bridge_slave_0: left promiscuous mode [ 213.749797][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.830320][T14615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.858764][ T4199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.871617][ T4199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.884214][ T4199] bond0 (unregistering): Released all slaves [ 213.969798][T17447] chnl_net:caif_netlink_parms(): no params data found [ 214.033389][T17518] loop1: detected capacity change from 0 to 256 [ 214.061422][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.068559][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.089568][T17447] bridge_slave_0: entered allmulticast mode [ 214.097800][T17447] bridge_slave_0: entered promiscuous mode [ 214.110892][ T4199] hsr_slave_0: left promiscuous mode [ 214.118607][ T4199] hsr_slave_1: left promiscuous mode [ 214.124564][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.132078][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.147661][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.155149][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.172688][ T4199] veth1_macvtap: left promiscuous mode [ 214.178302][ T4199] veth0_macvtap: left promiscuous mode [ 214.183913][ T4199] veth1_vlan: left promiscuous mode [ 214.189191][ T4199] veth0_vlan: left promiscuous mode [ 214.261395][ T4199] pim6reg (unregistering): left allmulticast mode [ 214.312377][ T4199] team0 (unregistering): Port device team_slave_1 removed [ 214.323555][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 214.370960][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.378187][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.387747][T17447] bridge_slave_1: entered allmulticast mode [ 214.394514][T17447] bridge_slave_1: entered promiscuous mode [ 214.422876][T17447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.434003][T17447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.462904][T17447] team0: Port device team_slave_0 added [ 214.469914][T17447] team0: Port device team_slave_1 added [ 214.489962][T17447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.497225][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.523341][T17447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.551340][T17447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.558343][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.584737][T17447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.588087][T17539] loop0: detected capacity change from 0 to 1024 [ 214.612035][T17540] __nla_validate_parse: 10 callbacks suppressed [ 214.612146][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'. [ 214.641205][T17447] hsr_slave_0: entered promiscuous mode [ 214.650177][T17447] hsr_slave_1: entered promiscuous mode [ 214.660868][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 214.674397][T17549] loop1: detected capacity change from 0 to 512 [ 214.681505][T17549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.691568][T17549] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.4047: iget: special inode unallocated [ 214.704456][T17549] EXT4-fs (loop1): get root inode failed [ 214.710134][T17549] EXT4-fs (loop1): mount failed [ 214.712725][T17552] loop3: detected capacity change from 0 to 2048 [ 214.756330][T17552] Alternate GPT is invalid, using primary GPT. [ 214.762678][T17552] loop3: p1 p2 p3 [ 214.765878][T17555] loop0: detected capacity change from 0 to 164 [ 214.781576][T17555] iso9660: Bad value for 'map' [ 214.797469][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 214.827458][T17555] loop0: detected capacity change from 0 to 1024 [ 214.872201][T17569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4056'. [ 214.956276][T17589] Cannot find add_set index 0 as target [ 214.989202][T17594] loop1: detected capacity change from 0 to 256 [ 215.017675][T17596] netlink: 'syz.3.4066': attribute type 2 has an invalid length. [ 215.027888][T17594] geneve2: entered promiscuous mode [ 215.033170][T17594] geneve2: entered allmulticast mode [ 215.034393][T17598] 9pnet_fd: Insufficient options for proto=fd [ 215.082707][T17601] 9pnet_fd: Insufficient options for proto=fd [ 215.085616][T17447] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.098066][T17601] tipc: Enabled bearer , priority 10 [ 215.104704][T17447] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.114606][T17447] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.123584][T17447] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.166037][T17447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.180857][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.199966][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.207181][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.216403][T17612] netlink: 'syz.1.4071': attribute type 4 has an invalid length. [ 215.252620][T17447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.263090][T17447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.288668][T14189] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.295816][T14189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.359489][T17619] netlink: 'syz.0.4073': attribute type 1 has an invalid length. [ 215.363032][T17447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.367334][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 215.454784][T17447] veth0_vlan: entered promiscuous mode [ 215.467549][T17634] loop1: detected capacity change from 0 to 256 [ 215.473325][T17447] veth1_vlan: entered promiscuous mode [ 215.496553][T17447] veth0_macvtap: entered promiscuous mode [ 215.504708][T17447] veth1_macvtap: entered promiscuous mode [ 215.518651][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.529224][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.539129][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.549742][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.559697][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.570723][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.581408][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.592744][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.602807][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.613280][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.625733][T17447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.636576][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.647319][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.657506][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.668166][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.678096][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.689181][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.699185][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.709838][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.719806][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.730368][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.740236][T17447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.750748][T17447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.763259][T17447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.774264][T17447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.783024][T17447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.791788][T17447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.800607][T17447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.811422][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4082'. [ 215.835488][T17653] loop1: detected capacity change from 0 to 512 [ 215.884835][T17653] netlink: 'syz.1.4083': attribute type 4 has an invalid length. [ 215.894095][T17653] netlink: 'syz.1.4083': attribute type 4 has an invalid length. [ 216.032465][T17675] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 216.104414][T17686] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4091'. [ 216.667506][ T4982] tipc: Node number set to 2886997162 [ 216.691308][T17703] loop2: detected capacity change from 0 to 2048 [ 216.781446][T17703] loop2: p1 < > p4 [ 216.826709][T17703] loop2: p4 size 8388608 extends beyond EOD, truncated [ 216.949226][T17706] veth1_to_hsr: entered promiscuous mode [ 216.982692][T17706] syzkaller0: entered promiscuous mode [ 216.997258][T17706] syzkaller0 (unregistering): left promiscuous mode [ 217.221881][T17702] veth1_to_hsr: left promiscuous mode [ 217.241401][T17708] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 217.262491][T17708] dvmrp1: linktype set to 0 [ 217.294900][T17716] loop2: detected capacity change from 0 to 512 [ 217.329202][T17716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.341440][T17726] loop1: detected capacity change from 0 to 1024 [ 217.344166][T17716] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.361015][T17728] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.369423][T17728] netlink: 'syz.4.4104': attribute type 1 has an invalid length. [ 217.373551][T17726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.377261][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4104'. [ 217.407121][T17447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.417864][T17726] vhci_hcd: invalid port number 74 [ 217.423071][T17726] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 217.455049][T16414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.528246][T17753] 9pnet_fd: Insufficient options for proto=fd [ 217.593204][T17770] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 217.600134][T17774] loop4: detected capacity change from 0 to 1024 [ 217.600452][T17770] dvmrp1: linktype set to 0 [ 217.613816][T17777] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262161 (only 8 groups) [ 217.632863][T17774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.650234][T17776] loop2: detected capacity change from 0 to 2048 [ 217.782161][T17782] FAULT_INJECTION: forcing a failure. [ 217.782161][T17782] name failslab, interval 1, probability 0, space 0, times 0 [ 217.794891][T17782] CPU: 1 PID: 17782 Comm: syz.3.4122 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 217.805078][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.815285][T17782] Call Trace: [ 217.818586][T17782] [ 217.821535][T17782] dump_stack_lvl+0xf2/0x150 [ 217.826172][T17782] dump_stack+0x15/0x20 [ 217.830456][T17782] should_fail_ex+0x229/0x230 [ 217.835174][T17782] ? sctp_add_bind_addr+0x6f/0x1e0 [ 217.840313][T17782] __should_failslab+0x92/0xa0 [ 217.845101][T17782] should_failslab+0x9/0x20 [ 217.849698][T17782] kmalloc_trace_noprof+0x4b/0x2a0 [ 217.854856][T17782] sctp_add_bind_addr+0x6f/0x1e0 [ 217.859884][T17782] sctp_copy_local_addr_list+0x19b/0x220 [ 217.865617][T17782] sctp_copy_one_addr+0x83/0x410 [ 217.870616][T17782] sctp_bind_addr_copy+0x12b/0x2b0 [ 217.875769][T17782] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 217.881905][T17782] sctp_connect_new_asoc+0x1d0/0x3b0 [ 217.887246][T17782] sctp_sendmsg+0xf05/0x1920 [ 217.891968][T17782] ? __pfx_sctp_sendmsg+0x10/0x10 [ 217.897036][T17782] inet_sendmsg+0xc5/0xd0 [ 217.901767][T17782] __sock_sendmsg+0x102/0x180 [ 217.906516][T17782] __sys_sendto+0x1e5/0x260 [ 217.911133][T17782] __x64_sys_sendto+0x78/0x90 [ 217.915936][T17782] x64_sys_call+0x16d7/0x2d70 [ 217.920718][T17782] do_syscall_64+0xc9/0x1c0 [ 217.925289][T17782] ? clear_bhb_loop+0x55/0xb0 [ 217.930039][T17782] ? clear_bhb_loop+0x55/0xb0 [ 217.935042][T17782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.940960][T17782] RIP: 0033:0x7f3ad107fbd9 [ 217.945441][T17782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.965169][T17782] RSP: 002b:00007f3ad0301048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.973694][T17782] RAX: ffffffffffffffda RBX: 00007f3ad120df60 RCX: 00007f3ad107fbd9 [ 217.981768][T17782] RDX: 0000000000034000 RSI: 0000000020000140 RDI: 0000000000000005 [ 217.989765][T17782] RBP: 00007f3ad03010a0 R08: 0000000020004ff0 R09: 0000000000000010 [ 217.997766][T17782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.005850][T17782] R13: 000000000000004d R14: 00007f3ad120df60 R15: 00007ffdcdbfd448 [ 218.013853][T17782] [ 218.027395][T17784] loop2: detected capacity change from 0 to 164 [ 218.034544][T17784] Unable to read rock-ridge attributes [ 218.059287][T14615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.099555][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 218.099573][ T29] audit: type=1400 audit(1720401502.422:18484): avc: denied { setopt } for pid=17783 comm="syz.2.4123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.191354][T17794] xt_NFQUEUE: number of total queues is 0 [ 218.218994][T17796] vlan3: entered promiscuous mode [ 218.288668][T17798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4129'. [ 218.320447][T17802] loop4: detected capacity change from 0 to 256 [ 218.362295][ T29] audit: type=1400 audit(1720401502.671:18485): avc: denied { mounton } for pid=17801 comm="syz.4.4131" path="/214/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 218.977986][T17807] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 218.983757][T17807] dvmrp1: linktype set to 0 [ 219.001771][T17809] loop3: detected capacity change from 0 to 1024 [ 219.011059][T17809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.064073][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 219.105731][T10039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.126916][T17820] loop2: detected capacity change from 0 to 512 [ 219.137484][T17820] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 219.146496][T17820] syz.2.4138: attempt to access beyond end of device [ 219.146496][T17820] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 219.148684][ T29] audit: type=1400 audit(1720401503.401:18486): avc: denied { getopt } for pid=17821 comm="syz.3.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.161180][T17820] EXT4-fs (loop2): couldn't read superblock of external journal [ 219.259858][ T29] audit: type=1400 audit(1720401503.493:18487): avc: denied { read write } for pid=17826 comm="syz.4.4139" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.266197][T17825] xt_CT: No such helper "syz0" [ 219.283823][ T29] audit: type=1400 audit(1720401503.493:18488): avc: denied { open } for pid=17826 comm="syz.4.4139" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.320686][T17825] loop2: detected capacity change from 0 to 512 [ 219.327449][T17825] EXT4-fs: quotafile must be on filesystem root [ 219.362642][ T29] audit: type=1400 audit(1720401503.594:18489): avc: denied { setopt } for pid=17833 comm="syz.3.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.390278][ T29] audit: type=1400 audit(1720401503.604:18490): avc: denied { view } for pid=17835 comm="syz.4.4142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 219.409610][ T29] audit: type=1400 audit(1720401503.613:18491): avc: denied { connect } for pid=17824 comm="syz.2.4140" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.464249][T17846] loop2: detected capacity change from 0 to 512 [ 219.498339][T17846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.512636][T17846] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.544360][T17447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.584698][ T29] audit: type=1400 audit(1720401503.797:18492): avc: denied { bind } for pid=17854 comm="syz.3.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.610426][ T29] audit: type=1400 audit(1720401503.816:18493): avc: denied { ioctl } for pid=17854 comm="syz.3.4151" path="socket:[61255]" dev="sockfs" ino=61255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.643021][T17859] loop3: detected capacity change from 0 to 1024 [ 219.650952][T17859] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.661149][T17860] netlink: 'syz.2.4149': attribute type 13 has an invalid length. [ 219.666642][T17859] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 219.669143][T17860] netlink: 'syz.2.4149': attribute type 58 has an invalid length. [ 219.677850][T17859] EXT4-fs (loop3): orphan cleanup on readonly fs [ 219.691551][T17859] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.4152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 219.710433][T17859] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz.3.4152: Bad quota inode: 3, type: 0 [ 219.721675][T17859] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 219.736511][T17859] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 219.744439][T17859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.757095][T17863] net_ratelimit: 3 callbacks suppressed [ 219.757108][T17863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.778593][T10039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.838166][T17869] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.853249][T17871] loop2: detected capacity change from 0 to 512 [ 219.859962][T17871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.867191][T17871] EXT4-fs: Mount option(s) incompatible with ext2 [ 219.940168][T17871] loop2: detected capacity change from 0 to 512 [ 219.947112][T17871] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.967242][T17871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4157: bg 0: block 64: padding at end of block bitmap is not set [ 219.982093][T17871] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.4157: Failed to acquire dquot type 0 [ 219.993768][T17871] EXT4-fs (loop2): 1 truncate cleaned up [ 220.000616][T17871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.023144][T17447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.075802][T17877] bond0: entered promiscuous mode [ 220.080905][T17877] bond_slave_0: entered promiscuous mode [ 220.086931][T17877] bond_slave_1: entered promiscuous mode [ 220.098057][T17877] batadv0: entered promiscuous mode [ 220.104489][T17877] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 220.112151][T17877] Cannot create hsr debugfs directory [ 220.136910][T17879] loop2: detected capacity change from 0 to 256 [ 220.280598][T17884] loop2: detected capacity change from 0 to 512 [ 220.287523][T17884] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 220.296604][T17884] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 220.350072][T17886] __nla_validate_parse: 2 callbacks suppressed [ 220.350089][T17886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4162'. [ 220.365431][T17886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.400115][T17890] dccp_invalid_packet: pskb_may_pull failed [ 220.425655][T17899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.432963][T17899] IPv6: NLM_F_CREATE should be set when creating new route [ 220.440177][T17899] IPv6: NLM_F_CREATE should be set when creating new route [ 220.447419][T17899] IPv6: NLM_F_CREATE should be set when creating new route [ 220.459168][T17899] loop2: detected capacity change from 0 to 512 [ 220.465785][T17899] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.472699][T17899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.483925][T17899] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 220.498678][T17899] EXT4-fs (loop2): 1 truncate cleaned up [ 220.504713][T17899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.741464][T17919] loop4: detected capacity change from 0 to 512 [ 220.748796][T17919] EXT4-fs error (device loop4): ext4_get_journal_inode:5752: comm syz.4.4173: inode #196608: comm syz.4.4173: iget: illegal inode # [ 220.763001][T17919] EXT4-fs (loop4): Remounting filesystem read-only [ 220.769671][T17919] EXT4-fs (loop4): no journal found [ 220.774957][T17919] EXT4-fs (loop4): can't get journal size [ 220.782225][T17919] EXT4-fs (loop4): failed to initialize system zone (-22) [ 220.789705][T17919] EXT4-fs (loop4): mount failed [ 220.885597][T17926] loop4: detected capacity change from 0 to 512 [ 220.899961][T17926] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.946707][T17930] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 220.965088][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4178'. [ 221.004417][T17940] loop4: detected capacity change from 0 to 1024 [ 221.015613][T17942] loop3: detected capacity change from 0 to 512 [ 221.022696][T17942] EXT4-fs: Ignoring removed oldalloc option [ 221.030580][T17942] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.4183: Parent and EA inode have the same ino 15 [ 221.043751][T17942] EXT4-fs (loop3): Remounting filesystem read-only [ 221.050469][T17942] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 221.060614][T17942] EXT4-fs (loop3): 1 orphan inode deleted [ 221.066657][T17942] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 221.156569][T17948] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 221.177950][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4185'. [ 221.200050][T17952] loop3: detected capacity change from 0 to 256 [ 221.276929][T17954] netlink: 'syz.3.4187': attribute type 10 has an invalid length. [ 221.408143][ T4982] kernel write not supported for file /vcsa1 (pid: 4982 comm: kworker/0:6) [ 221.445599][T17960] netlink: 'syz.2.4189': attribute type 11 has an invalid length. [ 221.453645][T17960] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4189'. [ 221.517447][T17962] loop2: detected capacity change from 0 to 8192 [ 221.858254][T17984] loop2: detected capacity change from 0 to 1764 [ 221.980457][T17986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4200'. [ 222.016244][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4203'. [ 222.026745][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4203'. [ 222.132256][T18015] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4209'. [ 222.150426][T18017] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 222.189315][T18019] netlink: 'syz.2.4211': attribute type 16 has an invalid length. [ 222.219730][T18021] netlink: zone id is out of range [ 222.224886][T18021] netlink: zone id is out of range [ 222.230062][T18021] netlink: zone id is out of range [ 222.235178][T18021] netlink: zone id is out of range [ 222.250471][T18021] netlink: zone id is out of range [ 222.254102][T18025] loop3: detected capacity change from 0 to 128 [ 222.256063][T18021] netlink: zone id is out of range [ 222.275317][T18025] ext4 filesystem being mounted at /498/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.320315][T18032] loop2: detected capacity change from 0 to 512 [ 222.329105][T18032] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz.2.4216: iget: special inode unallocated [ 222.331452][T18034] loop4: detected capacity change from 0 to 512 [ 222.350875][T18032] EXT4-fs (loop2): get root inode failed [ 222.356588][T18032] EXT4-fs (loop2): mount failed [ 222.363861][T18034] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.367903][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4217'. [ 222.384287][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4217'. [ 222.507824][T18049] loop2: detected capacity change from 0 to 1024 [ 222.638657][T18063] loop3: detected capacity change from 0 to 8192 [ 223.364497][T18078] vlan3: entered allmulticast mode [ 223.369790][T18078] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 223.381904][T18078] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 223.527766][T18076] netlink: 'syz.2.4229': attribute type 4 has an invalid length. [ 223.546117][T18076] netlink: 'syz.2.4229': attribute type 4 has an invalid length. [ 223.991549][T18092] dvmrp1: entered allmulticast mode [ 224.005280][T18094] loop4: detected capacity change from 0 to 256 [ 224.013397][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 224.013445][ T29] audit: type=1400 audit(1720401507.886:18676): avc: denied { read } for pid=18095 comm="syz.3.4237" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 224.019551][T18096] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.045064][ T29] audit: type=1400 audit(1720401507.886:18677): avc: denied { open } for pid=18095 comm="syz.3.4237" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 224.051840][T18096] netlink: 'syz.3.4237': attribute type 1 has an invalid length. [ 224.076041][ T29] audit: type=1400 audit(1720401507.951:18678): avc: denied { override_creds } for pid=18095 comm="syz.3.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 224.088388][T18096] program syz.3.4237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.104648][T18094] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.128251][ T29] audit: type=1400 audit(1720401507.997:18679): avc: denied { create } for pid=18093 comm="syz.4.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.148958][ T29] audit: type=1400 audit(1720401507.997:18680): avc: denied { ioctl } for pid=18093 comm="syz.4.4236" path="socket:[62792]" dev="sockfs" ino=62792 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.225133][ T29] audit: type=1400 audit(1720401508.080:18681): avc: denied { mount } for pid=18108 comm="syz.3.4243" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.251649][T18109] vlan0: entered promiscuous mode [ 224.258750][ T29] audit: type=1400 audit(1720401508.108:18682): avc: denied { create } for pid=18108 comm="syz.3.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.278450][ T29] audit: type=1400 audit(1720401508.117:18683): avc: denied { read write } for pid=18110 comm="syz.4.4244" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.302210][ T29] audit: type=1400 audit(1720401508.117:18684): avc: denied { open } for pid=18110 comm="syz.4.4244" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.327759][ T29] audit: type=1400 audit(1720401508.154:18685): avc: denied { mount } for pid=18110 comm="syz.4.4244" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 224.391516][T18129] Â: renamed from pim6reg1 [ 224.427077][T18136] loop3: detected capacity change from 0 to 2048 [ 224.434003][T18136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.441379][T18136] EXT4-fs: Ignoring removed nobh option [ 224.457260][T18146] xt_hashlimit: invalid interval [ 224.492228][T18152] loop4: detected capacity change from 0 to 128 [ 224.503562][T18136] xfrm0: left promiscuous mode [ 224.524522][T18152] can: request_module (can-proto-0) failed. [ 224.654125][T18170] loop3: detected capacity change from 0 to 512 [ 224.666561][T18170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.686787][T18170] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 224.695173][T18170] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 224.705497][T18170] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3011510273 > max in inode 13 [ 224.715838][T18170] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3011510274 > max in inode 13 [ 224.728146][T18170] EXT4-fs (loop3): 1 truncate cleaned up [ 224.871088][T18180] 9pnet_fd: Insufficient options for proto=fd [ 224.988533][T18190] loop3: detected capacity change from 0 to 512 [ 225.000196][T18191] dvmrp1: entered allmulticast mode [ 225.009081][T18190] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.199793][T18200] 9pnet_fd: Insufficient options for proto=fd [ 225.250347][T18211] loop2: detected capacity change from 0 to 1024 [ 225.586887][T18230] loop2: detected capacity change from 0 to 1024 [ 225.671720][T18230] FAULT_INJECTION: forcing a failure. [ 225.671720][T18230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.684870][T18230] CPU: 1 PID: 18230 Comm: syz.2.4282 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 225.695093][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.705221][T18230] Call Trace: [ 225.708556][T18230] [ 225.711607][T18230] dump_stack_lvl+0xf2/0x150 [ 225.716301][T18230] dump_stack+0x15/0x20 [ 225.720504][T18230] should_fail_ex+0x229/0x230 [ 225.725341][T18230] should_fail+0xb/0x10 [ 225.729602][T18230] should_fail_usercopy+0x1a/0x20 [ 225.734796][T18230] _copy_from_user+0x1e/0xd0 [ 225.739437][T18230] io_submit_one+0x54/0x1240 [ 225.744244][T18230] ? __rcu_read_unlock+0x4e/0x70 [ 225.749312][T18230] __se_sys_io_submit+0xf5/0x280 [ 225.754414][T18230] __x64_sys_io_submit+0x43/0x50 [ 225.759514][T18230] x64_sys_call+0x2ab5/0x2d70 [ 225.764261][T18230] do_syscall_64+0xc9/0x1c0 [ 225.768826][T18230] ? clear_bhb_loop+0x55/0xb0 [ 225.773540][T18230] ? clear_bhb_loop+0x55/0xb0 [ 225.778252][T18230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.784296][T18230] RIP: 0033:0x7f56b2d76bd9 [ 225.788802][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.808434][T18230] RSP: 002b:00007f56b1ff8048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 225.816881][T18230] RAX: ffffffffffffffda RBX: 00007f56b2f04f60 RCX: 00007f56b2d76bd9 [ 225.825031][T18230] RDX: 0000000020000380 RSI: 0000000000000002 RDI: 00007f56b2ed8000 [ 225.833110][T18230] RBP: 00007f56b1ff80a0 R08: 0000000000000000 R09: 0000000000000000 [ 225.841178][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.849173][T18230] R13: 000000000000000b R14: 00007f56b2f04f60 R15: 00007ffed040f778 [ 225.857216][T18230] [ 225.891321][T18233] loop4: detected capacity change from 0 to 1024 [ 225.938767][T18239] IPv6: Can't replace route, no match found [ 226.055029][T18246] netlink: 'syz.2.4287': attribute type 4 has an invalid length. [ 226.075584][T18255] loop2: detected capacity change from 0 to 128 [ 226.084010][T18255] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.190888][T18264] __nla_validate_parse: 11 callbacks suppressed [ 226.190909][T18264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4293'. [ 226.233089][T18268] loop2: detected capacity change from 0 to 1024 [ 226.240466][T18268] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.251533][T18268] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 226.259655][T18268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 226.266080][T18268] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.4295: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 226.284160][T18268] EXT4-fs error (device loop2): ext4_quota_enable:7037: comm syz.2.4295: Bad quota inode: 3, type: 0 [ 226.295273][T18268] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 226.309943][T18268] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 226.391480][T18272] loop2: detected capacity change from 0 to 1024 [ 226.519116][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4298'. [ 226.589692][T18292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4300'. [ 226.606287][T18274] chnl_net:caif_netlink_parms(): no params data found [ 226.615502][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 226.638935][ T4199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.657816][T18297] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55681 - 0 [ 226.666779][T18297] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55681 - 0 [ 226.675915][T18297] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55681 - 0 [ 226.684807][T18297] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55681 - 0 [ 226.694360][T18297] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 50441 - 0 [ 226.703213][T18297] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 50441 - 0 [ 226.712071][T18297] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 50441 - 0 [ 226.720916][T18297] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 50441 - 0 [ 226.730053][T18297] geneve2: entered promiscuous mode [ 226.743770][ T4199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.771433][T18274] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.778647][T18274] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.786161][T18274] bridge_slave_0: entered allmulticast mode [ 226.793787][T18274] bridge_slave_0: entered promiscuous mode [ 226.804461][ T4199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.815932][T18274] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.823054][T18274] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.830424][T18274] bridge_slave_1: entered allmulticast mode [ 226.830503][T14615] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 226.839493][T18274] bridge_slave_1: entered promiscuous mode [ 226.856414][T14615] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 226.902976][ T4199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.933859][T18274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.953263][T18274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.977878][T18274] team0: Port device team_slave_0 added [ 226.984785][T18274] team0: Port device team_slave_1 added [ 227.003150][T18274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.010304][T18274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.036358][T18274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.048768][T18274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.055812][T18274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.082522][T18274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.165982][T18274] hsr_slave_0: entered promiscuous mode [ 227.173835][T18274] hsr_slave_1: entered promiscuous mode [ 227.179868][T18274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.189603][T18274] Cannot create hsr debugfs directory [ 227.195574][ T4199] bridge_slave_1: left allmulticast mode [ 227.201387][ T4199] bridge_slave_1: left promiscuous mode [ 227.207213][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.218796][ T4199] bridge_slave_0: left allmulticast mode [ 227.224589][ T4199] bridge_slave_0: left promiscuous mode [ 227.230359][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.508098][ T4199] bond0 (unregistering): left promiscuous mode [ 227.514385][ T4199] bond_slave_0: left promiscuous mode [ 227.519915][ T4199] bond_slave_1: left promiscuous mode [ 227.526198][ T4199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.536595][ T4199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.548384][ T4199] bond0 (unregistering): Released all slaves [ 227.557050][ T4199] bond1 (unregistering): Released all slaves [ 227.595079][T18340] loop3: detected capacity change from 0 to 1024 [ 227.615367][ T4199] tipc: Left network mode [ 227.720175][ T4199] batadv0: left promiscuous mode [ 227.727711][ T4199] hsr_slave_0: left promiscuous mode [ 227.733463][ T4199] hsr_slave_1: left promiscuous mode [ 227.739903][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.747780][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.755986][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.760666][T18348] loop3: detected capacity change from 0 to 1024 [ 227.763500][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.771265][T18348] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 227.787471][ T4199] batman_adv: batadv0: Removing interface: vlan2 [ 227.788291][T18348] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 227.805934][ T4199] veth1_macvtap: left promiscuous mode [ 227.811584][ T4199] veth0_macvtap: left promiscuous mode [ 227.817118][ T4199] veth1_vlan: left promiscuous mode [ 227.822417][ T4199] veth0_vlan: left promiscuous mode [ 227.917279][ T4199] team0 (unregistering): Port device team_slave_1 removed [ 227.927701][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 227.972221][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4318'. [ 228.017283][T18332] chnl_net:caif_netlink_parms(): no params data found [ 228.065995][T18332] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.073175][T18332] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.080545][T18332] bridge_slave_0: entered allmulticast mode [ 228.086984][T18332] bridge_slave_0: entered promiscuous mode [ 228.094187][T18332] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.100398][T18364] loop3: detected capacity change from 0 to 1024 [ 228.101295][T18332] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.115882][T18332] bridge_slave_1: entered allmulticast mode [ 228.122403][T18332] bridge_slave_1: entered promiscuous mode [ 228.122773][T18364] EXT4-fs: test_dummy_encryption option not supported [ 228.147319][T18332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.158497][T18332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.183652][T18332] team0: Port device team_slave_0 added [ 228.191722][T18332] team0: Port device team_slave_1 added [ 228.299545][T18332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.306523][T18332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.332581][T18332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.343879][T18332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.350965][T18332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.376964][T18332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.414306][T18274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.431865][T18274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.457725][ T5070] tipc: Subscription rejected, illegal request [ 228.466310][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4325'. [ 228.475296][T18378] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4325'. [ 228.487942][T18378] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 228.495679][T18378] macsec1: entered allmulticast mode [ 228.497279][T18385] loop3: detected capacity change from 0 to 256 [ 228.501440][T18378] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 228.517093][T18274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.528478][T18332] hsr_slave_0: entered promiscuous mode [ 228.536295][T18332] hsr_slave_1: entered promiscuous mode [ 228.542558][T18332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.548252][T18385] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 228.554520][T18332] Cannot create hsr debugfs directory [ 228.566650][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 228.589679][T18274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.801674][T18274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.821742][ T4199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.832203][ T4199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.842601][ T4199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44531 - 0 [ 228.853616][ T4199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 51231 - 0 [ 228.876921][T18332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.920530][ T4199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.931028][ T4199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.941436][ T4199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44531 - 0 [ 228.951950][ T4199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 51231 - 0 [ 228.974957][T18414] loop2: detected capacity change from 0 to 8192 [ 228.982529][T18274] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.001945][T14189] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.009010][T14189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.017231][T18414] loop2: p1 p4 [ 229.021349][T18414] loop2: p4 start 50689 is beyond EOD, truncated [ 229.036834][T18332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.051595][T14189] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.058953][T14189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.073944][ T4199] team0: Port device netdevsim1 removed [ 229.081729][ T4199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.092051][ T4199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.102540][ T4199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44531 - 0 [ 229.112996][ T4199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 51231 - 0 [ 229.139751][T18415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4336'. [ 229.162200][T18332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.184290][T18274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.200730][ T4199] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 229.213644][ T4199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.223992][ T4199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.234390][ T4199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44531 - 0 [ 229.244768][ T4199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 51231 - 0 [ 229.265278][T18332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.291688][T18381] chnl_net:caif_netlink_parms(): no params data found [ 229.327231][T18394] chnl_net:caif_netlink_parms(): no params data found [ 229.371863][T18381] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.378976][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.386459][T18381] bridge_slave_0: entered allmulticast mode [ 229.393126][T18381] bridge_slave_0: entered promiscuous mode [ 229.400563][T18381] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.407763][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.415018][T18381] bridge_slave_1: entered allmulticast mode [ 229.421636][T18381] bridge_slave_1: entered promiscuous mode [ 229.454775][T18394] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.463117][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.470401][T18394] bridge_slave_0: entered allmulticast mode [ 229.477116][T18394] bridge_slave_0: entered promiscuous mode [ 229.484456][T18394] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.491627][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.500043][T18394] bridge_slave_1: entered allmulticast mode [ 229.506575][T18394] bridge_slave_1: entered promiscuous mode [ 229.522703][T18381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.534917][T18274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.557456][T18381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.578153][T18381] team0: Port device team_slave_0 added [ 229.584929][T18381] team0: Port device team_slave_1 added [ 229.591144][T18332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.601951][T18394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.613374][T18394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.638571][T18332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.648044][T18332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.666691][T18381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.673743][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.699834][T18381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.711401][T18381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.718399][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.744486][T18381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.755319][T18332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.767156][T18394] team0: Port device team_slave_0 added [ 229.774121][T18394] team0: Port device team_slave_1 added [ 229.808745][T18394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.815935][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.842132][T18394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.853657][ T4199] bridge_slave_1: left allmulticast mode [ 229.859405][ T4199] bridge_slave_1: left promiscuous mode [ 229.865133][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.873617][ T4199] bridge_slave_0: left allmulticast mode [ 229.879417][ T4199] bridge_slave_0: left promiscuous mode [ 229.885143][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.895175][ T4199] bridge_slave_1: left allmulticast mode [ 229.900974][ T4199] bridge_slave_1: left promiscuous mode [ 229.906645][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.914964][ T4199] bridge_slave_0: left allmulticast mode [ 229.920733][ T4199] bridge_slave_0: left promiscuous mode [ 229.926461][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.045017][ T4199] dvmrp1 (unregistering): left allmulticast mode [ 230.489971][ T4199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.500370][ T4199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.510857][ T4199] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 230.521522][ T4199] bond0 (unregistering): Released all slaves [ 230.530960][ T4199] bond1 (unregistering): Released all slaves [ 230.539842][ T4199] bond2 (unregistering): Released all slaves [ 230.551609][ T4199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.562212][ T4199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.573253][ T4199] bond0 (unregistering): Released all slaves [ 230.602890][T18394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.610167][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.636226][T18394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.647319][T18435] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4338'. [ 230.680162][T18381] hsr_slave_0: entered promiscuous mode [ 230.686775][T18381] hsr_slave_1: entered promiscuous mode [ 230.693754][T18381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.701340][T18381] Cannot create hsr debugfs directory [ 230.725052][ T4199] tipc: Disabling bearer [ 230.738889][ T4199] tipc: Left network mode [ 230.745167][T14168] IPVS: starting estimator thread 0... [ 230.802432][T18332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.812697][T18274] veth0_vlan: entered promiscuous mode [ 230.839262][T18274] veth1_vlan: entered promiscuous mode [ 230.850780][T18394] hsr_slave_0: entered promiscuous mode [ 230.857372][T18394] hsr_slave_1: entered promiscuous mode [ 230.863518][T18394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.872445][T18394] Cannot create hsr debugfs directory [ 230.877789][T18443] IPVS: using max 2448 ests per chain, 122400 per kthread [ 230.901738][T18332] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.953297][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 230.953313][ T29] audit: type=1400 audit(1720401514.292:18810): avc: denied { name_bind } for pid=18460 comm="syz.2.4347" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 230.988001][ T4199] hsr_slave_0: left promiscuous mode [ 230.993971][ T4199] hsr_slave_1: left promiscuous mode [ 230.999884][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.007408][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.015935][ T4199] batman_adv: batadv0: Removing interface: ipvlan2 [ 231.023441][ T4199] batman_adv: batadv0: Removing interface: vlan2 [ 231.036620][ T4199] hsr_slave_0: left promiscuous mode [ 231.043951][ T4199] hsr_slave_1: left promiscuous mode [ 231.050318][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.057785][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.065652][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.073419][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.087792][ T4199] veth0_macvtap: left promiscuous mode [ 231.093409][ T4199] veth1_vlan: left promiscuous mode [ 231.098649][ T4199] veth0_vlan: left promiscuous mode [ 231.107895][ T4199] veth1_macvtap: left promiscuous mode [ 231.113411][ T4199] veth0_macvtap: left promiscuous mode [ 231.118979][ T4199] veth1_vlan: left promiscuous mode [ 231.124368][ T4199] veth0_vlan: left promiscuous mode [ 231.260539][ T4199] team0 (unregistering): Port device team_slave_1 removed [ 231.271641][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 231.390700][ T4199] team0 (unregistering): Port device team_slave_1 removed [ 231.410643][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 231.507739][T18381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.570359][T18381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.615858][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.623017][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.637729][T18274] veth0_macvtap: entered promiscuous mode [ 231.651381][T18381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.690684][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.697858][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.737808][T18274] veth1_macvtap: entered promiscuous mode [ 231.747949][T18381] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 231.775159][T18381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.810108][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.820696][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.830610][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.835056][ T29] audit: type=1400 audit(1720401515.104:18811): avc: denied { create } for pid=18476 comm="syz.2.4352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.841039][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.841068][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.841085][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.868609][T18478] loop2: detected capacity change from 0 to 512 [ 231.871472][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.908612][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.908877][T18478] ext4 filesystem being mounted at /109 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.921447][T18274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.946536][ T29] audit: type=1400 audit(1720401515.206:18812): avc: denied { getattr } for pid=18476 comm="syz.2.4352" path="socket:[65170]" dev="sockfs" ino=65170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 231.962899][T18332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.990648][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.001254][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.011151][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.021606][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.031490][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.042005][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.052060][T18274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.062598][T18274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.084132][T18274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.103772][T18274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.112614][T18274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.121326][T18274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.130062][T18274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.171719][T18381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.189651][T18381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.208279][T18381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.223100][T18381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.245617][ T29] audit: type=1400 audit(1720401515.483:18813): avc: denied { mounton } for pid=18274 comm="syz-executor" path="/root/syzkaller.73eziR/syz-tmp" dev="sda1" ino=2013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 232.270521][ T29] audit: type=1400 audit(1720401515.483:18814): avc: denied { mount } for pid=18274 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 232.301425][T18381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.303956][ T29] audit: type=1400 audit(1720401515.538:18815): avc: denied { mounton } for pid=18274 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 232.341911][T18381] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.364966][T14185] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.372174][T14185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.394715][T18332] veth0_vlan: entered promiscuous mode [ 232.409531][T18501] loop2: detected capacity change from 0 to 2048 [ 232.413943][T18332] veth1_vlan: entered promiscuous mode [ 232.423696][T14189] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.430894][T14189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.480407][ T4199] IPVS: stop unused estimator thread 0... [ 232.481510][T18332] veth0_macvtap: entered promiscuous mode [ 232.492289][ T4199] IPVS: stop unused estimator thread 0... [ 232.497332][T18381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.508550][T18381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.541405][T18332] veth1_macvtap: entered promiscuous mode [ 232.565847][ T29] audit: type=1326 audit(1720401515.778:18816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90166d3bd9 code=0x0 [ 232.589069][ T29] audit: type=1326 audit(1720401515.778:18817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.0.4355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90166d3bd9 code=0x0 [ 232.604929][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.622863][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.632817][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.643385][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.653298][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.663877][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.674167][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.684605][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.694471][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.704956][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.715772][T18332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.726511][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.737035][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.747123][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.757753][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.767677][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.778387][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.788351][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.799115][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.809303][T18332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.819850][T18332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.834611][T18332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.850899][ T29] audit: type=1400 audit(1720401516.036:18818): avc: denied { listen } for pid=18515 comm="syz.0.4356" lport=53711 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.873975][ T29] audit: type=1400 audit(1720401516.036:18819): avc: denied { accept } for pid=18515 comm="syz.0.4356" lport=53711 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.911010][T18394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.923400][T18394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.936433][T18394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.947208][T18332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.956128][T18332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.964845][T18332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.973587][T18332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.984135][T18394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.002550][T18381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.027542][T18521] netem: change failed [ 233.084050][T18394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.112858][T18394] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.132548][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.139648][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.152380][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.153789][T18530] loop4: detected capacity change from 0 to 1024 [ 233.159479][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.166790][T18530] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 233.201259][T18381] veth0_vlan: entered promiscuous mode [ 233.210344][T18394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.229598][T18381] veth1_vlan: entered promiscuous mode [ 233.246601][T18530] loop4: detected capacity change from 0 to 1024 [ 233.254442][T18530] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 233.277315][T18394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.294194][T18381] veth0_macvtap: entered promiscuous mode [ 233.302236][T18381] veth1_macvtap: entered promiscuous mode [ 233.327242][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.337889][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.347775][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.358251][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.368164][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.378703][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.388543][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.398999][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.408930][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.419466][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.429438][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.440052][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.457513][T18381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.470685][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.481429][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.491378][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.501987][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.511920][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.522352][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.532200][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.542663][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.552567][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.563073][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.573003][T18381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.583562][T18381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.604720][T18381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.637614][T18381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.646445][T18381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.655239][T18381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.664019][T18381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.679508][T18548] loop4: detected capacity change from 0 to 164 [ 233.693140][T18548] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 233.702207][T18548] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 233.925512][T18394] veth0_vlan: entered promiscuous mode [ 233.941560][T18394] veth1_vlan: entered promiscuous mode [ 233.960683][T18394] veth0_macvtap: entered promiscuous mode [ 233.968792][T18394] veth1_macvtap: entered promiscuous mode [ 233.975659][T18555] __nla_validate_parse: 1 callbacks suppressed [ 233.975689][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4360'. [ 233.990926][T18555] netlink: 'syz.2.4360': attribute type 30 has an invalid length. [ 234.008286][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.018865][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.028851][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.039409][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.049305][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.059948][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.069855][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.080574][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.090436][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.100997][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.110999][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.121568][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.131528][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.142004][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.156124][T18394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.167832][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.178403][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.188293][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.198845][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.208715][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.219207][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.229218][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.239728][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.249581][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.260033][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.269901][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.280357][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.290209][T18394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.301253][T18394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.312987][T18394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.327902][T18394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.336852][T18394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.345653][T18394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.354514][T18394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.447412][T18581] loop4: detected capacity change from 0 to 2048 [ 234.486599][T18581] Alternate GPT is invalid, using primary GPT. [ 234.492924][T18581] loop4: p1 p2 p3 [ 234.566383][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4371'. [ 234.583265][T18598] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4374'. [ 234.595817][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4375'. [ 234.608407][T18602] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4376'. [ 234.617533][T18602] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4376'. [ 234.622220][T18604] loop4: detected capacity change from 0 to 512 [ 234.626517][T18602] netlink: 'syz.3.4376': attribute type 5 has an invalid length. [ 234.626544][T18602] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4376'. [ 234.636094][T18604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.658360][T18604] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz.4.4377: iget: special inode unallocated [ 234.670947][T18604] EXT4-fs (loop4): get root inode failed [ 234.676627][T18604] EXT4-fs (loop4): mount failed [ 234.685952][T18607] loop3: detected capacity change from 0 to 512 [ 234.695050][T18607] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.4378: casefold flag without casefold feature [ 234.707916][T18607] EXT4-fs (loop3): Remounting filesystem read-only [ 234.714907][T18607] EXT4-fs mount: 35 callbacks suppressed [ 234.714949][T18607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.733328][T18607] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 234.740239][T18607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.778832][T18611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4380'. [ 234.788001][T18611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4380'. [ 234.803361][T18614] netlink: 'syz.3.4381': attribute type 4 has an invalid length. [ 234.826071][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4382'. [ 234.852681][T18618] loop3: detected capacity change from 0 to 512 [ 234.867693][T18618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.879873][T18622] loop2: detected capacity change from 0 to 256 [ 234.883338][T18618] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.895828][T18622] FAT-fs (loop2): Unrecognized mount option "nodo" or missing value [ 234.911713][T18624] loop4: detected capacity change from 0 to 256 [ 234.923168][T18624] geneve2: entered promiscuous mode [ 234.928474][T18624] geneve2: entered allmulticast mode [ 234.935765][T18624] team0: Device geneve2 is up. Set it down before adding it as a team port [ 234.976552][T18394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.354053][ T4199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.364593][ T4199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55681 - 0 [ 235.375035][ T4199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 50441 - 0 [ 235.531302][ T4199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.541747][ T4199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55681 - 0 [ 235.552331][ T4199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 50441 - 0 [ 235.599765][T18636] chnl_net:caif_netlink_parms(): no params data found [ 235.618832][ T4199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.629342][ T4199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55681 - 0 [ 235.639911][ T4199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 50441 - 0 [ 235.688164][ T4199] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 235.707433][ T4199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.717883][ T4199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55681 - 0 [ 235.728352][ T4199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 50441 - 0 [ 235.730275][T18678] loop1: detected capacity change from 0 to 512 [ 235.746443][T18636] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.747588][T18678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.753724][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.768433][T18678] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.4401: bad orphan inode 16 [ 235.771126][T18636] bridge_slave_0: entered allmulticast mode [ 235.781313][T18678] ext4_test_bit(bit=15, block=4) = 0 [ 235.787381][T18636] bridge_slave_0: entered promiscuous mode [ 235.791884][T18678] EXT4-fs (loop1): 1 orphan inode deleted [ 235.794873][T18678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.803479][T18636] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.803562][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.830387][T18636] bridge_slave_1: entered allmulticast mode [ 235.837554][T18636] bridge_slave_1: entered promiscuous mode [ 235.848975][T18678] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.4401: reserved inode found cleared - inode=1 [ 235.872481][T18636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.890128][T18636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.890814][T18381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.922681][T18636] team0: Port device team_slave_0 added [ 235.929755][T18636] team0: Port device team_slave_1 added [ 235.953480][T18636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.960575][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.986541][T18636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.999690][ T4199] bridge_slave_1: left allmulticast mode [ 236.005481][ T4199] bridge_slave_1: left promiscuous mode [ 236.011341][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.020459][ T4199] bridge_slave_0: left allmulticast mode [ 236.026445][ T4199] bridge_slave_0: left promiscuous mode [ 236.032245][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.116496][ T4199] dvmrp1 (unregistering): left allmulticast mode [ 236.178659][ T4199] bond0 (unregistering): left promiscuous mode [ 236.184916][ T4199] bond_slave_0: left promiscuous mode [ 236.190410][ T4199] bond_slave_1: left promiscuous mode [ 236.197202][ T4199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.208901][ T4199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.220437][ T4199] bond0 (unregistering): Released all slaves [ 236.229487][T18636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.236473][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.262500][T18636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.332638][T18636] hsr_slave_0: entered promiscuous mode [ 236.339489][T18636] hsr_slave_1: entered promiscuous mode [ 236.345635][T18636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.355309][T18636] Cannot create hsr debugfs directory [ 236.367675][T18696] bond1: entered promiscuous mode [ 236.373150][T18696] bond1: entered allmulticast mode [ 236.382998][T18696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.404477][T18696] bond1 (unregistering): Released all slaves [ 236.470952][ T4199] batadv0: left promiscuous mode [ 236.478350][ T4199] hsr_slave_0: left promiscuous mode [ 236.489766][ T4199] hsr_slave_1: left promiscuous mode [ 236.495618][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.503213][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.515116][ T4199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.522698][ T4199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.549270][ T4199] veth1_macvtap: left promiscuous mode [ 236.554891][ T4199] veth0_macvtap: left promiscuous mode [ 236.560483][ T4199] veth1_vlan: left promiscuous mode [ 236.565883][ T4199] veth0_vlan: left promiscuous mode [ 236.682397][ T4199] team0 (unregistering): Port device team_slave_1 removed [ 236.695462][ T4199] team0 (unregistering): Port device team_slave_0 removed [ 236.799972][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 236.799988][ T29] audit: type=1400 audit(1720401519.682:18866): avc: denied { write } for pid=18714 comm="syz.1.4413" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.850838][ T29] audit: type=1400 audit(1720401519.728:18867): avc: denied { sqpoll } for pid=18718 comm="syz.3.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 236.907844][ T29] audit: type=1400 audit(1720401519.784:18868): avc: denied { watch watch_reads } for pid=18728 comm="syz.3.4419" path="/18" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.036633][T18739] net_ratelimit: 2 callbacks suppressed [ 237.036649][T18739] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.070476][ T29] audit: type=1400 audit(1720401519.932:18869): avc: denied { connect } for pid=18724 comm="syz.0.4417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.094803][ T29] audit: type=1400 audit(1720401519.932:18870): avc: denied { read } for pid=18724 comm="syz.0.4417" path="socket:[67894]" dev="sockfs" ino=67894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.229582][T18636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.240502][T18636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.241585][ T4199] IPVS: stop unused estimator thread 0... [ 237.256065][T18636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.272632][T18636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.360641][T18636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.376173][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.386378][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.393562][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.416663][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.423951][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.515858][T18636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.608678][T18636] veth0_vlan: entered promiscuous mode [ 237.618874][T18636] veth1_vlan: entered promiscuous mode [ 237.639413][T18636] veth0_macvtap: entered promiscuous mode [ 237.648041][T18636] veth1_macvtap: entered promiscuous mode [ 237.661587][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.672152][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.682347][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.693014][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.702909][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.713421][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.723353][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.734251][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.744179][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.754673][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.764575][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.775339][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.785412][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.795895][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.811253][T18636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.823255][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.833775][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.843839][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.854304][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.864153][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.874702][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.884581][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.895179][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.905079][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.915655][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.925506][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.936093][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.945938][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.956575][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.969539][T18636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.980166][T18636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.989223][T18636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.998220][T18636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.006966][T18636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.057559][ T29] audit: type=1400 audit(1720401520.845:18871): avc: denied { read } for pid=18767 comm="syz.0.4427" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.081406][ T29] audit: type=1400 audit(1720401520.845:18872): avc: denied { open } for pid=18767 comm="syz.0.4427" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.109897][ T29] audit: type=1400 audit(1720401520.901:18873): avc: denied { write } for pid=18767 comm="syz.0.4427" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.131859][T18770] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 238.202918][ T29] audit: type=1400 audit(1720401520.984:18874): avc: denied { mount } for pid=18778 comm="syz.2.4431" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 238.262892][ T29] audit: type=1400 audit(1720401521.021:18875): avc: denied { remount } for pid=18778 comm="syz.2.4431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 238.295464][T18789] IPv6: Can't replace route, no match found [ 238.392150][T18803] TCP: Unexpected MD5 Hash found for [fe80::74:0:bb].0->[ff02::1].20002 [FR.] [ 238.682852][T18833] xt_hashlimit: invalid interval [ 239.601435][T18845] loop2: detected capacity change from 0 to 1024 [ 239.627469][T18845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.812603][T18636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.839787][T18856] netlink: 'syz.1.4450': attribute type 10 has an invalid length. [ 239.848421][T18856] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.855659][T18856] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.872995][T18858] loop2: detected capacity change from 0 to 512 [ 239.876664][T18856] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.880147][T18858] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 239.886470][T18856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.902491][T18856] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.909592][T18856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.921082][T18856] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 239.964959][T18864] loop1: detected capacity change from 0 to 512 [ 239.971686][T18864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.982019][T18864] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 239.990162][T18864] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 239.998825][T18864] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3011510273 > max in inode 13 [ 240.009166][T18864] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3011510274 > max in inode 13 [ 240.019481][T18864] EXT4-fs (loop1): 1 truncate cleaned up [ 240.025587][T18864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.038959][T18864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.074249][T18867] 9pnet_fd: Insufficient options for proto=fd [ 240.134131][T18883] IPv6: Can't replace route, no match found [ 240.158823][T18885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.195497][T18893] loop1: detected capacity change from 0 to 128 [ 240.204225][T18893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.216934][T18893] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.246141][T18381] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.262224][T18902] loop2: detected capacity change from 0 to 1024 [ 240.271007][T18902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.309888][T18906] ================================================================== [ 240.318032][T18906] BUG: KCSAN: data-race in wg_packet_send_staged_packets / wg_packet_send_staged_packets [ 240.327888][T18906] [ 240.330222][T18906] read to 0xffff888126a18b28 of 4 bytes by task 18905 on cpu 0: [ 240.337960][T18906] wg_packet_send_staged_packets+0x60e/0xac0 [ 240.344018][T18906] wg_xmit+0x5c8/0x6a0 [ 240.348899][T18906] dev_hard_start_xmit+0x119/0x3f0 [ 240.354068][T18906] __dev_queue_xmit+0xf83/0x1e50 [ 240.359028][T18906] packet_xmit+0x4b/0x1e0 [ 240.363386][T18906] packet_sendmsg+0x2ae1/0x3320 [ 240.368266][T18906] __sock_sendmsg+0x140/0x180 [ 240.372977][T18906] __sys_sendto+0x1e5/0x260 [ 240.377523][T18906] __x64_sys_sendto+0x78/0x90 [ 240.382225][T18906] x64_sys_call+0x16d7/0x2d70 [ 240.386931][T18906] do_syscall_64+0xc9/0x1c0 [ 240.391467][T18906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.397402][T18906] [ 240.399732][T18906] write to 0xffff888126a18b28 of 4 bytes by task 18906 on cpu 1: [ 240.407682][T18906] wg_packet_send_staged_packets+0x6e5/0xac0 [ 240.413790][T18906] wg_xmit+0x5c8/0x6a0 [ 240.417875][T18906] dev_hard_start_xmit+0x119/0x3f0 [ 240.423425][T18906] __dev_queue_xmit+0xf83/0x1e50 [ 240.428391][T18906] packet_xmit+0x4b/0x1e0 [ 240.432749][T18906] packet_sendmsg+0x2ae1/0x3320 [ 240.437622][T18906] __sock_sendmsg+0x140/0x180 [ 240.442332][T18906] __sys_sendto+0x1e5/0x260 [ 240.446859][T18906] __x64_sys_sendto+0x78/0x90 [ 240.451558][T18906] x64_sys_call+0x16d7/0x2d70 [ 240.456293][T18906] do_syscall_64+0xc9/0x1c0 [ 240.460815][T18906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.466736][T18906] [ 240.469052][T18906] value changed: 0x00000001 -> 0x00000000 [ 240.474784][T18906] [ 240.477123][T18906] Reported by Kernel Concurrency Sanitizer on: [ 240.483275][T18906] CPU: 1 PID: 18906 Comm: syz.1.4466 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 240.493522][T18906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 240.503584][T18906] ================================================================== [ 240.569090][T18636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.