last executing test programs: 6.595694044s ago: executing program 4 (id=2935): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="54ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.550522207s ago: executing program 4 (id=2936): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[{@discard}, {@data_writeback}, {@resuid}, {@noblock_validity}, {@minixdf}, {@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_async_commit}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x48000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) 5.964933583s ago: executing program 4 (id=2957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x3800}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 5.957271724s ago: executing program 4 (id=2958): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414100c"], 0x68}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="182000007800911fdabcf8b3077fa54a07"], 0xfe6b) 5.923234286s ago: executing program 4 (id=2959): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc901, &(0x7f00000002c0), 0x1, 0x4d3, &(0x7f0000000540)="$eJzs3c9vG1UeAPDvTOJu06abdHcP3UrbrbZdpdVunabZ7UZ76Hal1fZUCSj3EhIniuLEUey0TVRBKv4AJIQAiRMnLvwHSKhnTgipEtwRIBCCFg4coEa2x/0R7CZRnbhNPh/pZd788vf7Ynk8b+bJE8CudTQizkfE3Wq1ejIiBrLlaVZitVFq2925fX2iVpKoVi99m0SSLWu+VpJN92e77Y2I5y5EvJj8Om55eWV2vFgsLGbzw5W5heHy8sqpmbnx6cJ0YX50dOTsWOfaWcvp3P++fOPVd/9/7oO/X/3s8tcnXqql1Z+tf7AdndRoeq7+v2jqjYjFrQjWBT3ZNNflPAAA2JjaOf7vIuIvEXEyBqKnfnYKAAAA7CTV//THT0lEFQAAANix0voY2CTNZ2MB+iNN8/nGeNk/xL60WCpX/jZVWpqfbIyVHYxcOjVTLJzOxgoPRi6pzY/U6/fnz6yZH42IgxHx+kBffT4/USpOdvviBwAAAOwS+9f0/38YaPT/AQAAgB1msNsJAAAAAFtO/x8AAAB2Pv1/AAAA2NGeuXixVqrN519PXllemi1dOTVZKM/m55Ym8hOlxYX8dKk0Xf/Nvrn1Xq9YKi38I+aXrg1XCuXKcHl55fJcaWm+cnnmoUdgAwAAANvo4J9vfppExOq/++qlZk+3kwK2xYXNbPzF1uUBbL+ebicAdE1vtxMAuibX7QSArkvuV9NW69sO3vloa/IBAAA6b+iP7e//P/rawGrLfgLw9PAhht3L/X/YvTZ7///DLcoD2H45ZwCw6yXrrH/8+//V6qYSAgAAOq6/XpI0n90L7I80zecjDtQfC5BLpmaKhdMR8duI+GQg95va/Eh9z2TdPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlEFAAAAdrSI9Kske/7X0MDx/rXXB/YkPw7UpxFx9e1Lb14br1QWR2rLv7u3vPJWtvxMN65gAAAAAGs1++nNfjwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNKd29cnmmU7437z34gYbBW/N/bWp3sjFxH7vk+i94H9kojo6UD81RsRcahV/KSWVgxmWbSK39eR+GlW20z8vqjttb8D8WE3u1k7/pxv9flP42h92vrz35uVx9X++JfeO/71tDn+HNhgjMO3Gtu3jH8j4nBv6+NfM37SJv6xDcZ/4fmVlXbrqu9EDLX8/kkeijVcmVsYLi+vnJqZG58uTBfmR0dHzo79a+yfY6eHp2aKhexvyxiv/en9u+3i19q/r038wXXaf3yD7f/51rXbv29Uc63inzjW+v0/1CZ+mn33/TWr19YPNeurjfqDjrz38ZFHtX+yTfvXe/9PbLD9J5995fMNbgoAbIPy8srseLFYWHxqK73xRKSh8hRWXn4y0ngiK90+MgEAAJ12/6S/25kAAAAAAAAAAAAAAAAAAADA7rX5HwZLNr3X2pir3WkqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/RIAAP//aYPUUA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/5) 5.766661129s ago: executing program 4 (id=2961): socket$unix(0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2.800567911s ago: executing program 2 (id=3037): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) sendmmsg$inet(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458", 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="d0", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0x2b8}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@dfltuid}], [], 0x6b}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0x100800001) 2.786909462s ago: executing program 2 (id=3038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000200)=0x2, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 2.657226292s ago: executing program 2 (id=3045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x8, 0x10000}, 0x48) r1 = socket(0x2, 0x4000000000080002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000380), &(0x7f00000003c0)=@udp=r1}, 0x20) 2.630977024s ago: executing program 2 (id=3046): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007ba7f8ff00000000b7080000000000007b8af01835a4dc04ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r6) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.4333227s ago: executing program 2 (id=3057): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(r1, 0x90000) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$watch_queue(r1, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e22}, 0x6e) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000500)=0x0) timer_settime(r3, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x10, 0x80002, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.689703878s ago: executing program 1 (id=3074): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@acl}, {@noblock_validity}, {@minixdf}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x3, 0x7fff, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x1101091, 0x0) setitimer(0x0, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) alarm(0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x14, 0x30, 0x51b}, 0x14}}, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x3) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x8, &(0x7f0000000240), 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000080)=0x1) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x9, 0xa9b, 0x418, r1, 0x8, '\x00', 0x0, r5, 0x5, 0x3, 0x5, 0x3}, 0x48) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3, 0x0, r6, 0x60000000, '\x00', r7, r2, 0x4, 0x1, 0x1}, 0x48) 1.674841959s ago: executing program 0 (id=3075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpeername(r1, 0x0, &(0x7f0000001ac0)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40011) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000240)=']', 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 1.591105725s ago: executing program 1 (id=3076): madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x18) 1.565229137s ago: executing program 1 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_dump={0x40}}) 1.564920707s ago: executing program 1 (id=3078): timer_create(0x3, 0x0, &(0x7f0000000080)) timer_create(0x3, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f0000001440)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001440)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010805000000004871c2"], 0x1c}}, 0x0) fcntl$dupfd(r1, 0x0, r2) 1.486778194s ago: executing program 0 (id=3079): memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xaa\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.486068984s ago: executing program 2 (id=3080): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x15, r1, 0x0, &(0x7f0000000000)) 1.325169356s ago: executing program 0 (id=3081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796ee1697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cd89b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e6a9763959b1c4c360137c570ebfbf4e3ba541e5701616d5d76c5805332dd92afd20fab494617dc5cd8d5b277e019065c7629036cd26cf0ec8155fa1dd4deaf2679e550b3b5da2b16782bcb34fd784d32c7294d3aaf"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', r5, 0x7800, 0x7, 0x10000, 0xc, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x65, 0x0, 0x7f, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@noop, @noop, @rr={0x7, 0x1b, 0xb2, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @multicast1]}, @cipso={0x86, 0x1f, 0x3, [{0x2, 0x4, "f5ea"}, {0x2, 0x6, "42592a01"}, {0x6, 0xf, "6dd2ff8821673f58dd1246ad9b"}]}, @ssrr={0x89, 0xf, 0x9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @rr={0x7, 0x7, 0x27, [@remote]}, @ssrr={0x89, 0x13, 0x67, [@rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @remote]}, @end]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.189519137s ago: executing program 0 (id=3082): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 921.768658ms ago: executing program 0 (id=3084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in6=@dev, 0x0, 0x0, 0xff}}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x17}, 0x90) rt_sigaction(0x16, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0xffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000001c0)='*$^\x00', 0x4) sendto$inet(r7, &(0x7f00000000c0)="1c", 0x88d5, 0x0, 0x0, 0x0) 717.792184ms ago: executing program 3 (id=3088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f00000016c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "37f3b73187e1c83c3963721a037b66893f91a0849f0367fc7c913089d7cd"}}, {{@ipv6={@mcast1, @private0, [], [], 'batadv0\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 717.225844ms ago: executing program 3 (id=3089): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r5 = io_uring_setup(0x48ae, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x5e}, 0x20) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000002c0)=0x100, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000ebffffff000000008510000000000000186f045644", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006"], 0x0}, 0x90) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r7, &(0x7f00000000c0)=""/83, 0xfffffec3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000307"], 0x20) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 702.136995ms ago: executing program 3 (id=3090): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 670.708518ms ago: executing program 3 (id=3091): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x105980, 0x0) 624.233691ms ago: executing program 3 (id=3092): socketpair(0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0xa, 0x0, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x450001, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000180)=""/151, 0x97}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x1, 0x3, 0x400000000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000002000/0x2000)=nil) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, 0x0, 0x0) bind$llc(r2, 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) close(0xffffffffffffffff) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_create(0x0) unlink(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000540)={0x60002002}) close(r5) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x40000000}) epoll_wait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x268a) shutdown(0xffffffffffffffff, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r6, &(0x7f0000000580)="905d2b8d37b1dcea3842b424fff8132aac208ef182dcae28d46bef906a1da5ccd83978c5770ec5176efd319a647a00d2389fd49208b4144087dc5ed52da44b40abf50c20bd364e14e020793a59ff52b1217344247e4954ab10e07d4ba56568a4f2518f71ee080a13e0edd3b3464750247da7a34ecb4a3713b651032dfc2f38446f4569594d426a34c19921a877a7857164b0e1333ee7546bdb87064065637ab0e528b6830ca0b480cac54a969e53660330c1a7840f2b80c6ba81d9de57d535fef82119370fa692bd7fe89ec7a25dded97b69f59219fa278751997de33bc760e9388dba23b07064550597d989c0438ea4784de56d6b9fd470d5cd9b051d", 0xfd, 0x0, &(0x7f0000000480)={0x23, 0x3f}, 0x10) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 607.851762ms ago: executing program 1 (id=3093): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="000000f300000000b702000050c0000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r1}, 0xf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local}}, [@sec_ctx={0xc, 0x8, {0xfffffffffffffec2}}, @mark={0xc}]}, 0x68}}, 0x0) setitimer(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x7e, 0x0, 0x0, 0x0, "71ec6d726511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2090000002995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766c8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e08004a64c6d243523f5de7b347f3b740e105d0ed1ffae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000100000000000000000000000002000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) keyctl$describe(0x3, r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 591.687274ms ago: executing program 3 (id=3094): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xc02, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x200000000006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x3130002, &(0x7f00000013c0)=ANY=[], 0x1, 0x2ac, &(0x7f0000000680)="$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") openat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file1\x00', 0xa2000489) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00e789da34e04a1ffbfd4b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d672eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235b33bc18c4ed0351cd285197b0241569048b5b416ba1c57217be5a338392f681617ee8c35bb21f0a9eed63b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076afc3752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855b3250f8f73e16bc593730b88d7a3346b945e276875915040ce498f262cd8ce8191ee84e3ce5526a0a4bb707cc711a3311f27b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a8bb29b90ffffff51eeab4747b94c35beac5fd2ed195e20ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65eca23c742443c84e21a440998c6c69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b05ac96b838c932b35511628ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b0900227769f5350adae56f07284be80bd0279c9dfbaa9521d746dd6c44d670b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d57deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a6893ff038d8099c229bda0801f8b8171dd73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14fae4e03197f5da8b8d36d9b3467beee619b9d9882f7eabfb5a6d1b5d39ec6703d50d8abf4a102f61296f46e519e1617e34dc711020a54ec92971f7025d4c7a0e4f9b6dcca1a00ae9bbeb6f2e72d78ccac527c4a8c8f007e77b7fe095516907060a7f1570128de98254e60d32373ef40fb2ea6ab7cc92374e3eed77ca5cef0c71bbf2e3dc32d54ff4346c9c82313274ad31fb7118ede1d0209fb983c47e2cc5a08d8f3b96cd171c3b469edc7857f14433a2c95f1ce2f36e41d09a59d10858c3f29d2310000000000000000000000000000000000000000b0eac1950f898d1e3649cfa40d0d6549d34da1ced0cf2119cd734024077ff83afaeed177d20012166256f2c60030af505a8f031eff7f713c3c"], 0x1, 0x11f4, &(0x7f0000001280)="$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") gettid() timer_create(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80085504, 0x0) r3 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x0) timer_getoverrun(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8141, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0xfffffff8, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) epoll_create(0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000005c0)={0x0, 0x0, 0x0, 'queue1\x00'}) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, 0x0, 0x0) 590.767183ms ago: executing program 1 (id=3095): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x0, 0x7fe2, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x6c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xeb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000034000900000000000000000002000000040099000800018004008a"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffff4f80ffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff020000000000000000002f000000e0018900907800000000000000000000000000000001ff0000aafc0100"/94], 0x0) 0s ago: executing program 0 (id=3096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796ee1697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cd89b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e6a9763959b1c4c360137c570ebfbf4e3ba541e5701616d5d76c5805332dd92afd20fab494617dc5cd8d5b277e019065c7629036cd26cf0ec8155fa1dd4deaf2679e550b3b5da2b16782bcb34fd784d32c7294d3aaf"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', r5, 0x7800, 0x7, 0x10000, 0xc, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x65, 0x0, 0x7f, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@noop, @noop, @rr={0x7, 0x1b, 0xb2, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @multicast1]}, @cipso={0x86, 0x1f, 0x3, [{0x2, 0x4, "f5ea"}, {0x2, 0x6, "42592a01"}, {0x6, 0xf, "6dd2ff8821673f58dd1246ad9b"}]}, @ssrr={0x89, 0xf, 0x9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @rr={0x7, 0x7, 0x27, [@remote]}, @ssrr={0x89, 0x13, 0x67, [@rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @remote]}, @end]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) kernel console output (not intermixed with test programs): ge_slave_1: left promiscuous mode [ 128.977159][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.986774][ T4877] bridge_slave_0: left allmulticast mode [ 128.992469][ T4877] bridge_slave_0: left promiscuous mode [ 128.998155][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.011589][ T9366] xt_hashlimit: max too large, truncated to 1048576 [ 129.111072][ T4877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.121891][ T4877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.139726][ T4877] bond0 (unregistering): Released all slaves [ 129.164101][ T9271] veth0_macvtap: entered promiscuous mode [ 129.189765][ T9271] veth1_macvtap: entered promiscuous mode [ 129.223634][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.234181][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.244069][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.254495][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.264300][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.274862][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.284762][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.294478][ T9372] loop1: detected capacity change from 0 to 2048 [ 129.295214][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.315412][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.332429][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.342901][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.352692][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.363211][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.373115][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.383564][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.393358][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.403799][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.414280][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.423508][ T4877] hsr_slave_0: left promiscuous mode [ 129.429149][ T4877] hsr_slave_1: left promiscuous mode [ 129.435786][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.443191][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.450930][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.453601][ T9372] loop1: unable to read partition table [ 129.458404][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.471529][ T9372] loop1: partition table beyond EOD, truncated [ 129.477696][ T9372] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 129.485854][ T4877] veth1_macvtap: left promiscuous mode [ 129.491397][ T4877] veth0_macvtap: left promiscuous mode [ 129.496890][ T4877] veth1_vlan: left promiscuous mode [ 129.502136][ T4877] veth0_vlan: left promiscuous mode [ 129.587618][ T4877] team0 (unregistering): Port device team_slave_1 removed [ 129.597454][ T4877] team0 (unregistering): Port device team_slave_0 removed [ 129.640336][ T9271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.649111][ T9271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.657819][ T9271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.666659][ T9271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.715108][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 129.715182][ T29] audit: type=1326 audit(1720307717.331:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 129.745520][ T29] audit: type=1326 audit(1720307717.331:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 129.769067][ T29] audit: type=1326 audit(1720307717.331:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 129.792587][ T29] audit: type=1326 audit(1720307717.331:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 129.816013][ T29] audit: type=1326 audit(1720307717.331:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.1.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 129.825333][ T9384] bond1: entered promiscuous mode [ 129.844442][ T9384] bond1: entered allmulticast mode [ 129.850177][ T9384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.862886][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1906'. [ 129.944873][ T29] audit: type=1400 audit(1720307717.534:848): avc: denied { bind } for pid=9389 comm="syz.1.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.001023][ T9397] bridge0: entered promiscuous mode [ 130.006308][ T9397] vlan2: entered promiscuous mode [ 130.054015][ T9400] loop4: detected capacity change from 0 to 2048 [ 130.121677][ T9400] loop4: unable to read partition table [ 130.127451][ T9400] loop4: partition table beyond EOD, truncated [ 130.133731][ T9400] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 130.159845][ T9314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.168256][ T9314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.176436][ T9314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.185147][ T9314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.211423][ T29] audit: type=1326 audit(1720307717.774:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.4.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0096a7bd9 code=0x7ffc0000 [ 130.232950][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.241632][ T29] audit: type=1326 audit(1720307717.811:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.4.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0096a7bd9 code=0x7ffc0000 [ 130.264951][ T29] audit: type=1326 audit(1720307717.811:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.4.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc0096a7bd9 code=0x7ffc0000 [ 130.269621][ T9314] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.288403][ T29] audit: type=1326 audit(1720307717.811:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.4.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0096a7bd9 code=0x7ffc0000 [ 130.323447][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.330511][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.347253][ T9314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.357906][ T9314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.370944][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.378516][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.430133][ T9314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.490706][ T9314] veth0_vlan: entered promiscuous mode [ 130.498882][ T9314] veth1_vlan: entered promiscuous mode [ 130.513075][ T9314] veth0_macvtap: entered promiscuous mode [ 130.520474][ T9314] veth1_macvtap: entered promiscuous mode [ 130.530168][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.540617][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.550540][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.560940][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.570773][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.581171][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.590961][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.601438][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.612811][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.621298][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.631875][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.641957][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.652467][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.662536][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.672968][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.682782][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.693268][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.704160][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.719047][ T9423] bond1: entered promiscuous mode [ 130.724180][ T9423] bond1: entered allmulticast mode [ 130.729375][ T9423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.739089][ T9314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.747918][ T9314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.756645][ T9314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.765367][ T9314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.821705][ T9431] loop2: detected capacity change from 0 to 512 [ 130.832057][ T9431] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.894617][ T9438] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1948'. [ 130.957397][ T9449] loop0: detected capacity change from 0 to 512 [ 130.964354][ T9449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.986288][ T9449] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.015312][ T9455] bond1: entered promiscuous mode [ 131.020361][ T9455] bond1: entered allmulticast mode [ 131.025808][ T9455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.115124][ T9468] netlink: 'syz.2.1958': attribute type 4 has an invalid length. [ 131.125006][ T9468] xt_hashlimit: overflow, try lower: 512/9223372036854775808 [ 131.253786][ T9483] bond2: entered promiscuous mode [ 131.253803][ T9483] bond2: entered allmulticast mode [ 131.253908][ T9483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.293393][ T9488] loop0: detected capacity change from 0 to 2048 [ 131.366846][ T9488] loop0: unable to read partition table [ 131.372577][ T9488] loop0: partition table beyond EOD, truncated [ 131.378749][ T9488] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 131.505311][ T9500] netlink: 'syz.0.1973': attribute type 4 has an invalid length. [ 131.516361][ T9500] xt_hashlimit: overflow, try lower: 512/9223372036854775808 [ 131.746597][ T9530] loop1: detected capacity change from 0 to 512 [ 131.756501][ T9530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.767981][ T9530] EXT4-fs (loop1): 1 truncate cleaned up [ 131.786735][ T9540] sg_write: data in/out 54/154 bytes for SCSI command 0x0-- guessing data in; [ 131.786735][ T9540] program syz.0.1990 not setting count and/or reply_len properly [ 131.904017][ T9557] loop0: detected capacity change from 0 to 512 [ 131.924323][ T9559] loop1: detected capacity change from 0 to 128 [ 131.932694][ T9557] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.945765][ T9557] netlink: 'syz.0.1998': attribute type 4 has an invalid length. [ 132.077378][ T9571] netlink: 'syz.0.1998': attribute type 17 has an invalid length. [ 132.105165][ T9572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2002'. [ 132.144145][ T9580] loop2: detected capacity change from 0 to 512 [ 132.150839][ T9580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.152044][ T9576] loop4: detected capacity change from 0 to 1024 [ 132.167762][ T9580] EXT4-fs (loop2): 1 truncate cleaned up [ 132.167857][ T9576] EXT4-fs: Ignoring removed orlov option [ 132.179715][ T9576] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.190687][ T9576] EXT4-fs (loop4): group descriptors corrupted! [ 132.421193][ T9600] tmpfs: Bad value for 'mpol' [ 132.535367][ T9611] loop4: detected capacity change from 0 to 512 [ 132.555048][ T9611] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.645911][ T9617] loop4: detected capacity change from 0 to 512 [ 132.652729][ T9617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.663704][ T9617] EXT4-fs (loop4): 1 truncate cleaned up [ 132.842011][ T9627] tmpfs: Bad value for 'mpol' [ 132.870631][ T9635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9635 comm=syz.0.2029 [ 132.930829][ T9642] loop0: detected capacity change from 0 to 1024 [ 132.937797][ T9642] EXT4-fs: Ignoring removed oldalloc option [ 132.943750][ T9642] EXT4-fs: Ignoring removed orlov option [ 132.953083][ T9642] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 132.954184][ T9644] hsr0: entered promiscuous mode [ 133.028832][ T9651] loop4: detected capacity change from 0 to 512 [ 133.036028][ T9651] ext4: Unknown parameter 'noacl' [ 133.070476][ T9663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9663 comm=syz.1.2042 [ 133.090131][ T9665] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2043'. [ 133.100038][ T9665] gretap0: entered promiscuous mode [ 133.106981][ T9651] loop4: detected capacity change from 0 to 1024 [ 133.119496][ T9665] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2043'. [ 133.120321][ T9651] EXT4-fs: Ignoring removed orlov option [ 133.134165][ T9665] 0ªX¹¦D: renamed from gretap0 [ 133.134722][ T9651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.147560][ T9665] 0ªX¹¦D: left promiscuous mode [ 133.152533][ T9665] 0ªX¹¦D: entered allmulticast mode [ 133.159098][ T9665] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 133.267713][ T9681] netlink: 'syz.4.2049': attribute type 2 has an invalid length. [ 133.355835][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2055'. [ 133.368488][ T9693] 9pnet_fd: Insufficient options for proto=fd [ 133.388826][ T9697] loop4: detected capacity change from 0 to 256 [ 133.401482][ T9697] FAT-fs (loop4): Directory bread(block 64) failed [ 133.408021][ T9697] FAT-fs (loop4): Directory bread(block 65) failed [ 133.415985][ T9697] FAT-fs (loop4): Directory bread(block 66) failed [ 133.424675][ T9697] FAT-fs (loop4): Directory bread(block 67) failed [ 133.432556][ T9697] FAT-fs (loop4): Directory bread(block 68) failed [ 133.439459][ T9697] FAT-fs (loop4): Directory bread(block 69) failed [ 133.447115][ T9697] FAT-fs (loop4): Directory bread(block 70) failed [ 133.454845][ T9697] FAT-fs (loop4): Directory bread(block 71) failed [ 133.461466][ T9697] FAT-fs (loop4): Directory bread(block 72) failed [ 133.468163][ T9697] FAT-fs (loop4): Directory bread(block 73) failed [ 133.625908][ T9705] netlink: 'syz.4.2060': attribute type 2 has an invalid length. [ 133.883470][ T9722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2068'. [ 133.894694][ T9722] 9pnet_fd: Insufficient options for proto=fd [ 133.943814][ T9729] netlink: 'syz.1.2071': attribute type 2 has an invalid length. [ 133.976648][ T9732] loop1: detected capacity change from 0 to 512 [ 134.234939][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2080'. [ 134.255340][ T9749] 9pnet_fd: Insufficient options for proto=fd [ 134.362088][ T9766] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.369495][ T9766] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 134.444878][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2087'. [ 134.458439][ T9775] loop2: detected capacity change from 0 to 8192 [ 134.755547][ T9790] nfs: Unknown parameter 'ñ&\^' [ 134.772002][ T9790] loop2: detected capacity change from 0 to 1024 [ 134.778965][ T9790] EXT4-fs: Ignoring removed oldalloc option [ 134.785112][ T9790] EXT4-fs: Ignoring removed i_version option [ 134.791121][ T9790] EXT4-fs: Ignoring removed orlov option [ 134.918469][ T9796] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 135.245864][ T9806] loop1: detected capacity change from 0 to 8192 [ 135.288390][ T9814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2107'. [ 135.351769][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 135.351783][ T29] audit: type=1326 audit(1720307722.527:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.391138][ T29] audit: type=1326 audit(1720307722.527:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.414511][ T29] audit: type=1326 audit(1720307722.527:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.437907][ T29] audit: type=1326 audit(1720307722.527:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.461266][ T29] audit: type=1326 audit(1720307722.527:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.484832][ T29] audit: type=1326 audit(1720307722.527:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.508122][ T29] audit: type=1326 audit(1720307722.527:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.531489][ T29] audit: type=1326 audit(1720307722.527:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.554890][ T29] audit: type=1326 audit(1720307722.527:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.578256][ T29] audit: type=1326 audit(1720307722.527:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 135.726633][ T9841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2119'. [ 135.740668][ T9837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2115'. [ 135.785891][ T9845] loop2: detected capacity change from 0 to 8192 [ 135.876851][ T9847] Cannot find add_set index 0 as target [ 135.898351][ T9847] usb usb8: usbfs: process 9847 (syz.2.2122) did not claim interface 0 before use [ 135.907880][ T9850] loop4: detected capacity change from 0 to 512 [ 135.908014][ T9850] ext4: Unknown parameter 'noacl' [ 135.957022][ T9850] loop4: detected capacity change from 0 to 1024 [ 135.963574][ T9850] EXT4-fs: Ignoring removed orlov option [ 135.969295][ T9850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.056958][ T9860] loop4: detected capacity change from 0 to 512 [ 136.078314][ T9860] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.192102][ T9870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2130'. [ 136.525201][ T9895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2142'. [ 136.974155][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2154'. [ 136.999623][ T9931] loop2: detected capacity change from 0 to 1024 [ 137.013518][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 137.051788][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.058908][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.066129][ T9911] bridge_slave_0: entered allmulticast mode [ 137.072697][ T9911] bridge_slave_0: entered promiscuous mode [ 137.079600][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.086825][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.093997][ T9911] bridge_slave_1: entered allmulticast mode [ 137.100549][ T9911] bridge_slave_1: entered promiscuous mode [ 137.121103][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.131796][ T9931] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 137.141280][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.153217][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.174367][ T9911] team0: Port device team_slave_0 added [ 137.181383][ T9911] team0: Port device team_slave_1 added [ 137.196736][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.203781][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.229923][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.244664][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.258021][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.264955][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.269779][ T9941] loop1: detected capacity change from 0 to 512 [ 137.291496][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.318426][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.330614][ T9941] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.331874][ T9911] hsr_slave_0: entered promiscuous mode [ 137.347074][ T9911] hsr_slave_1: entered promiscuous mode [ 137.382306][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.469587][ T9956] 9pnet: Could not find request transport: fd0x0000000000000004 [ 137.490087][ T9956] loop1: detected capacity change from 0 to 1024 [ 137.512935][ T28] bridge_slave_1: left allmulticast mode [ 137.518616][ T28] bridge_slave_1: left promiscuous mode [ 137.524497][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.539053][ T28] bridge_slave_0: left allmulticast mode [ 137.544701][ T28] bridge_slave_0: left promiscuous mode [ 137.550443][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.571080][ T9956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.599851][ T9966] loop2: detected capacity change from 0 to 4096 [ 137.719571][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.730247][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.740398][ T28] bond0 (unregistering): Released all slaves [ 137.749528][ T9968] netlink: 'syz.0.2167': attribute type 5 has an invalid length. [ 137.841459][ T9985] IPv6: sit1: Disabled Multicast RS [ 137.945614][ T9987] loop2: detected capacity change from 0 to 1024 [ 138.005757][ T28] hsr_slave_0: left promiscuous mode [ 138.014805][ T28] hsr_slave_1: left promiscuous mode [ 138.020810][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.028386][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.037967][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.045407][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.055169][ T28] veth1_macvtap: left promiscuous mode [ 138.060720][ T28] veth0_macvtap: left promiscuous mode [ 138.066242][ T28] veth1_vlan: left promiscuous mode [ 138.071513][ T28] veth0_vlan: left promiscuous mode [ 138.154276][ T28] team0 (unregistering): Port device team_slave_1 removed [ 138.167641][ T28] team0 (unregistering): Port device team_slave_0 removed [ 138.297541][ T9911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.305969][ T9911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.314487][ T9911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.323017][ T9911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.356868][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.368617][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.377327][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.384594][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.403921][ T9911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.414276][ T9911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.427534][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.434597][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.484825][T10012] netlink: 'syz.2.2182': attribute type 5 has an invalid length. [ 138.499353][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.596458][ T9911] veth0_vlan: entered promiscuous mode [ 138.610992][ T9911] veth1_vlan: entered promiscuous mode [ 138.633424][ T9911] veth0_macvtap: entered promiscuous mode [ 138.643324][T10029] 9pnet: Could not find request transport: fd0x0000000000000004 [ 138.645742][ T9911] veth1_macvtap: entered promiscuous mode [ 138.659046][T10029] loop1: detected capacity change from 0 to 1024 [ 138.668592][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.679175][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.689064][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.699532][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.709501][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.719981][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.729793][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.740249][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.752477][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.760994][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.771428][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.781297][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.791718][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.801610][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.812060][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.821922][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.832472][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.859523][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.872806][ T9911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.881639][ T9911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.890382][ T9911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.899095][ T9911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.899241][T10029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.969153][T10041] nfs: Unknown parameter 'ñ&\^' [ 139.169764][T10054] io-wq is not configured for unbound workers [ 139.204388][T10056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2196'. [ 139.219526][T10056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2196'. [ 139.460546][T10090] tap0: tun_chr_ioctl cmd 2147767511 [ 139.537697][T10098] loop3: detected capacity change from 0 to 512 [ 139.564551][T10098] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.773292][T10116] sctp: [Deprecated]: syz.0.2220 (pid 10116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.773292][T10116] Use struct sctp_sack_info instead [ 139.816994][T10123] loop3: detected capacity change from 0 to 164 [ 139.880491][T10131] loop3: detected capacity change from 0 to 512 [ 139.890446][T10131] EXT4-fs mount: 74 callbacks suppressed [ 139.890455][T10131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.908781][T10131] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.928536][ T9911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.993288][T10139] loop3: detected capacity change from 0 to 512 [ 140.009668][T10139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.022436][T10139] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.040045][ T9911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.120313][T10154] loop3: detected capacity change from 0 to 256 [ 140.163337][T10161] 9pnet_virtio: no channels available for device [ 140.195832][T10167] loop2: detected capacity change from 0 to 512 [ 140.217932][T10167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.230915][T10167] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.251801][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.358880][T10194] loop1: detected capacity change from 0 to 128 [ 140.367719][T10194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.382310][T10194] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.425370][ T9234] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.459379][T10208] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.466895][T10208] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.666482][T10241] Option 'kÆvÏ4ì…ð' to dns_resolver key: bad/missing value [ 140.670727][T10214] chnl_net:caif_netlink_parms(): no params data found [ 140.696024][T10245] netlink: 'syz.1.2269': attribute type 2 has an invalid length. [ 140.703804][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 140.727838][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.734944][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.743458][T10214] bridge_slave_0: entered allmulticast mode [ 140.750095][T10214] bridge_slave_0: entered promiscuous mode [ 140.757426][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.764497][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.772094][T10214] bridge_slave_1: entered allmulticast mode [ 140.779488][T10214] bridge_slave_1: entered promiscuous mode [ 140.801768][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.810833][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2275'. [ 140.823130][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.857053][T10214] team0: Port device team_slave_0 added [ 140.864686][T10214] team0: Port device team_slave_1 added [ 140.887988][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.895020][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.921027][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.932520][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.939495][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.965479][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.981140][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2285'. [ 141.003275][T10214] hsr_slave_0: entered promiscuous mode [ 141.009411][T10214] hsr_slave_1: entered promiscuous mode [ 141.015493][T10214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.023027][T10214] Cannot create hsr debugfs directory [ 141.028493][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2286'. [ 141.144840][T10214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.249540][T10298] loop2: detected capacity change from 0 to 512 [ 141.276701][T10298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.292491][T10300] loop1: detected capacity change from 0 to 1024 [ 141.296596][T10298] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.310814][T10300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.335335][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.347371][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.486096][T10314] loop1: detected capacity change from 0 to 512 [ 141.504940][T10314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.525695][T10314] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.558208][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.670073][T10330] loop1: detected capacity change from 0 to 512 [ 141.689386][T10330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.702972][T10330] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.733331][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.777532][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 141.814962][T10342] netlink: 'syz.1.2310': attribute type 27 has an invalid length. [ 141.938205][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.945417][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.013225][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 142.013239][ T29] audit: type=1400 audit(1720307728.674:1077): avc: denied { read write } for pid=10346 comm="syz.2.2311" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.042856][ T29] audit: type=1400 audit(1720307728.674:1078): avc: denied { open } for pid=10346 comm="syz.2.2311" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.103420][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.122342][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.153317][T10342] hsr0: left promiscuous mode [ 142.210506][T10342] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.219514][T10342] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.228594][T10342] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.237451][T10342] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.255734][T10342] bond1: left promiscuous mode [ 142.260522][T10342] bond1: left allmulticast mode [ 142.457993][T10385] loop1: detected capacity change from 0 to 128 [ 142.509207][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2320'. [ 142.529770][T10390] netlink: 'syz.2.2322': attribute type 27 has an invalid length. [ 142.610462][T10400] loop1: detected capacity change from 0 to 512 [ 142.620870][T10403] netlink: 'syz.0.2325': attribute type 7 has an invalid length. [ 142.643544][ T29] audit: type=1400 audit(1720307729.256:1079): avc: denied { write } for pid=10401 comm="syz.0.2325" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.672716][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.673822][T10400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 142.679887][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.692406][T10400] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.709745][T10411] serio: Serial port pts0 [ 142.739601][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 143.000307][ T29] audit: type=1400 audit(1720307729.588:1080): avc: denied { read } for pid=10417 comm="syz.0.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.019788][T10429] loop1: detected capacity change from 0 to 512 [ 143.022557][T10429] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2332: corrupted in-inode xattr: e_name out of bounds [ 143.040565][T10429] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2332: couldn't read orphan inode 15 (err -117) [ 143.052935][T10429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.114358][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.130272][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.188015][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.219792][T10390] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.228861][T10390] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.238056][T10390] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.246953][T10390] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.266523][T10390] bond1: left promiscuous mode [ 143.271638][T10390] bond1: left allmulticast mode [ 143.298569][ T29] audit: type=1400 audit(1720307729.856:1081): avc: denied { read } for pid=10434 comm="syz.1.2334" lport=45839 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 143.371486][T10444] loop1: detected capacity change from 0 to 512 [ 143.378867][T10444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.385633][T10444] EXT4-fs: Ignoring removed orlov option [ 143.396886][T10444] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 143.404999][T10444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 143.413804][T10444] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 143.423302][T10444] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 143.433258][T10444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.490771][T10450] loop2: detected capacity change from 0 to 128 [ 143.602283][T10451] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.2338: dx entry: limit 65535 != root limit 120 [ 143.614413][T10451] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.2338: Corrupt directory, running e2fsck is recommended [ 143.785361][T10459] veth1_virt_wifi: entered promiscuous mode [ 143.792186][T10459] veth1_virt_wifi: left promiscuous mode [ 143.903060][T10467] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.927075][T10469] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.965541][T10475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18578 sclass=netlink_route_socket pid=10475 comm=syz.0.2351 [ 144.226949][T10484] veth1_virt_wifi: entered promiscuous mode [ 144.240306][T10484] veth1_virt_wifi: left promiscuous mode [ 144.278718][T10488] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.332530][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.343166][T10496] loop2: detected capacity change from 0 to 256 [ 144.357883][T10499] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.385728][T10504] delete_channel: no stack [ 144.406847][ T29] audit: type=1400 audit(1720307730.882:1082): avc: denied { write } for pid=10503 comm="syz.2.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.415228][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 144.457711][T10514] veth1_virt_wifi: entered promiscuous mode [ 144.464800][T10514] veth1_virt_wifi: left promiscuous mode [ 144.472131][T10516] netlink: 'syz.0.2370': attribute type 10 has an invalid length. [ 144.480073][T10516] veth0_macvtap: left promiscuous mode [ 144.494167][T10516] veth0_macvtap: entered promiscuous mode [ 144.502300][T10516] team0: Device macvtap0 failed to register rx_handler [ 144.509338][T10516] veth0_macvtap: left promiscuous mode [ 144.529399][T10520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18578 sclass=netlink_route_socket pid=10520 comm=syz.1.2371 [ 144.560278][ T29] audit: type=1400 audit(1720307731.030:1083): avc: denied { mounton } for pid=10525 comm="syz.1.2374" path="/proc/258/cgroup" dev="proc" ino=36000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 144.584591][ T29] audit: type=1400 audit(1720307731.030:1084): avc: denied { mounton } for pid=10525 comm="syz.1.2374" path="/proc/258/cgroup" dev="nsfs" ino=4026532435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.611252][ T29] audit: type=1400 audit(1720307731.076:1085): avc: denied { accept } for pid=10515 comm="syz.0.2370" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 144.638661][T10529] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2375'. [ 144.650758][T10529] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2375'. [ 144.720733][T10530] loop2: detected capacity change from 0 to 512 [ 144.727604][T10530] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.737851][T10530] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 144.748288][T10530] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2375: inode #15: comm syz.2.2375: iget: illegal inode # [ 144.762432][T10530] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2375: couldn't read orphan inode 15 (err -117) [ 144.774852][T10530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.791296][ T29] audit: type=1400 audit(1720307731.233:1086): avc: denied { nlmsg_read } for pid=10528 comm="syz.2.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.791292][T10529] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2375'. [ 144.827590][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.016643][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2380'. [ 145.089903][T10546] delete_channel: no stack [ 145.362550][T10568] loop2: detected capacity change from 0 to 512 [ 145.369092][T10568] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.376522][T10568] ext4: Unknown parameter 'subj_role' [ 145.468927][T10578] tipc: Started in network mode [ 145.473813][T10578] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 145.482813][T10578] tipc: Enabling of bearer rejected, failed to enable media [ 145.939299][T10214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.996564][T10590] loop1: detected capacity change from 0 to 512 [ 146.003686][T10590] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4591: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 146.017134][T10590] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 146.027057][T10214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.078441][T10214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.130738][ T4877] bridge_slave_1: left allmulticast mode [ 146.136392][ T4877] bridge_slave_1: left promiscuous mode [ 146.142055][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.149732][ T4877] bridge_slave_0: left allmulticast mode [ 146.155414][ T4877] bridge_slave_0: left promiscuous mode [ 146.161032][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.250389][ T4877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.260546][ T4877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.270381][ T4877] bond0 (unregistering): Released all slaves [ 146.282955][T10600] batman_adv: batadv0: Adding interface: ipvlan2 [ 146.289272][T10600] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.314691][T10600] batman_adv: batadv0: Interface activated: ipvlan2 [ 146.336513][T10214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.341839][T10603] delete_channel: no stack [ 146.349301][T10214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.358378][T10214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.366544][T10214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.406084][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.418963][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.427852][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.434918][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.446362][ T4877] hsr_slave_0: left promiscuous mode [ 146.452372][ T4877] hsr_slave_1: left promiscuous mode [ 146.458122][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.460053][T10610] loop1: detected capacity change from 0 to 512 [ 146.465521][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.480555][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.488053][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.498330][T10610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.511093][ T4877] veth1_macvtap: left promiscuous mode [ 146.511117][T10610] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.527148][ T4877] veth0_macvtap: left promiscuous mode [ 146.532877][ T4877] veth1_vlan: left promiscuous mode [ 146.538091][ T4877] veth0_vlan: left promiscuous mode [ 146.544973][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.592318][T10623] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.599967][T10623] vhci_hcd: invalid port number 23 [ 146.640423][T10625] loop1: detected capacity change from 0 to 512 [ 146.646928][T10625] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.653474][T10625] ext4: Unknown parameter 'subj_role' [ 146.659255][ T4877] team0 (unregistering): Port device team_slave_1 removed [ 146.669599][ T4877] team0 (unregistering): Port device team_slave_0 removed [ 146.718900][T10214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.729284][T10214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.759049][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.766138][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.825747][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.836149][T10641] vxcan1: tx address claim with different name [ 146.836427][T10645] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 146.866922][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 146.888217][T10645] loop1: detected capacity change from 0 to 128 [ 146.936219][T10214] veth0_vlan: entered promiscuous mode [ 146.951364][T10214] veth1_vlan: entered promiscuous mode [ 146.984351][T10214] veth0_macvtap: entered promiscuous mode [ 146.996032][T10214] veth1_macvtap: entered promiscuous mode [ 147.011693][T10214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.022274][T10214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.032113][T10214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.042545][T10214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.053588][T10214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.066072][T10214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.076592][T10214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.086455][T10214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.097011][T10214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.109509][T10214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.119118][T10214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.127925][T10214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.136718][T10214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.145424][T10214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.282260][T10699] loop2: detected capacity change from 0 to 256 [ 147.453057][T10710] loop2: detected capacity change from 0 to 512 [ 147.470973][T10710] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 147.483239][T10710] EXT4-fs (loop2): 1 truncate cleaned up [ 147.492334][T10710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.507835][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 147.507848][ T29] audit: type=1400 audit(1720307733.744:1156): avc: denied { bind } for pid=10709 comm="syz.2.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.535150][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.622764][T10711] chnl_net:caif_netlink_parms(): no params data found [ 147.654237][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.661424][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.668598][T10711] bridge_slave_0: entered allmulticast mode [ 147.674885][T10711] bridge_slave_0: entered promiscuous mode [ 147.681602][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.688705][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.695920][T10711] bridge_slave_1: entered allmulticast mode [ 147.702587][T10711] bridge_slave_1: entered promiscuous mode [ 147.720221][T10711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.730555][T10711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.746527][ T4877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.762016][T10711] team0: Port device team_slave_0 added [ 147.768676][T10711] team0: Port device team_slave_1 added [ 147.785511][T10711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.792515][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.818416][T10711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.830655][T10711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.837603][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.863616][T10711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.874835][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 147.891110][ T4877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.905512][T10740] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.912955][T10740] vhci_hcd: invalid port number 23 [ 147.941050][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'. [ 147.950541][T10744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10744 comm=syz.2.2453 [ 147.963247][T10744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=10744 comm=syz.2.2453 [ 147.976252][ T4877] bond0: (slave netdevsim1): Releasing backup interface [ 147.977542][T10744] loop2: detected capacity change from 0 to 128 [ 147.990137][T10744] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.991199][ T4877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.017397][T10711] hsr_slave_0: entered promiscuous mode [ 148.023457][T10711] hsr_slave_1: entered promiscuous mode [ 148.171959][ T29] audit: type=1400 audit(1720307734.353:1157): avc: denied { bind } for pid=10762 comm="syz.0.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.191467][ T29] audit: type=1400 audit(1720307734.353:1158): avc: denied { name_bind } for pid=10762 comm="syz.0.2460" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 148.212230][ T29] audit: type=1400 audit(1720307734.353:1159): avc: denied { node_bind } for pid=10762 comm="syz.0.2460" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 148.247982][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2454'. [ 148.287456][ T4877] bridge_slave_1: left allmulticast mode [ 148.293117][ T4877] bridge_slave_1: left promiscuous mode [ 148.298814][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.344854][ T4877] bridge_slave_0: left allmulticast mode [ 148.350547][ T4877] bridge_slave_0: left promiscuous mode [ 148.356255][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.412607][T10771] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.422202][T10771] vhci_hcd: invalid port number 23 [ 148.515838][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 148.550580][T10775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10775 comm=syz.0.2464 [ 148.563304][T10775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=10775 comm=syz.0.2464 [ 148.666211][ T4877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.676231][ T4877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.686360][ T4877] bond0 (unregistering): Released all slaves [ 148.771182][T10784] loop1: detected capacity change from 0 to 512 [ 148.777993][T10784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.789896][ T4877] hsr_slave_0: left promiscuous mode [ 148.795933][ T4877] hsr_slave_1: left promiscuous mode [ 148.800327][T10784] EXT4-fs (loop1): 1 orphan inode deleted [ 148.806984][T10784] EXT4-fs (loop1): 1 truncate cleaned up [ 148.813057][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.813148][T10784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.820576][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.840452][T10784] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 148.855161][T10784] EXT4-fs (loop1): Remounting filesystem read-only [ 148.855595][ T4877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.861755][T10784] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1599: inode #17: comm syz.1.2468: cleanup dec ref error -28 [ 148.869064][ T4877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.892503][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.902063][ T4877] veth1_macvtap: left promiscuous mode [ 148.907594][ T4877] veth0_macvtap: left promiscuous mode [ 148.913273][ T4877] veth1_vlan: left promiscuous mode [ 148.918465][ T4877] veth0_vlan: left promiscuous mode [ 148.992245][T10793] loop1: detected capacity change from 0 to 164 [ 149.011465][ T29] audit: type=1400 audit(1720307735.138:1160): avc: denied { recv } for pid=9314 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.23 dest=44890 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 149.069767][ T4877] team0 (unregistering): Port device team_slave_1 removed [ 149.078257][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.089633][ T29] audit: type=1400 audit(1720307735.202:1161): avc: denied { egress } for pid=10360 comm="kworker/1:11" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 149.089727][ T4877] team0 (unregistering): Port device team_slave_0 removed [ 149.113563][ T29] audit: type=1400 audit(1720307735.202:1162): avc: denied { sendto } for pid=10360 comm="kworker/1:11" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 149.194193][T10807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.209710][T10809] sctp: [Deprecated]: syz.2.2479 (pid 10809) Use of int in maxseg socket option. [ 149.209710][T10809] Use struct sctp_assoc_value instead [ 149.264689][ T29] audit: type=1326 audit(1720307735.368:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.2.2482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa014073bd9 code=0x0 [ 149.348747][T10711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.357316][T10711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.365931][T10711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.381950][T10711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.426126][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.438785][T10711] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.447828][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.454916][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.466330][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.473403][T10365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.493223][T10711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.508804][ T29] audit: type=1400 audit(1720307735.590:1164): avc: denied { shutdown } for pid=10825 comm="syz.0.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.512432][T10826] bridge0: port 3(vlan0) entered blocking state [ 149.534847][T10826] bridge0: port 3(vlan0) entered disabled state [ 149.548444][T10826] vlan0: entered allmulticast mode [ 149.554412][T10826] vlan0: left allmulticast mode [ 149.583107][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.672634][T10846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.701555][T10711] veth0_vlan: entered promiscuous mode [ 149.710270][T10711] veth1_vlan: entered promiscuous mode [ 149.725056][T10711] veth0_macvtap: entered promiscuous mode [ 149.733841][T10711] veth1_macvtap: entered promiscuous mode [ 149.744399][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.754904][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.764724][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.775207][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.787991][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.798779][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.809310][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.819159][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.829619][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.840149][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.851648][T10711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.860542][T10711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.869334][T10711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.878084][T10711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.232374][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 150.298626][T10872] program syz.1.2496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.334073][T10876] loop2: detected capacity change from 0 to 512 [ 150.340669][T10876] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.347423][T10876] ext4: Unknown parameter 'subj_role' [ 151.321040][T10897] program syz.2.2508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.360810][T10902] bridge0: port 3(vlan0) entered blocking state [ 151.367237][T10902] bridge0: port 3(vlan0) entered disabled state [ 151.375314][T10902] vlan0: entered allmulticast mode [ 151.381069][T10902] vlan0: left allmulticast mode [ 151.465865][ T29] audit: type=1400 audit(1720307737.399:1165): avc: denied { bind } for pid=10905 comm="syz.2.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.870054][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 151.879714][T10914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10914 comm=syz.4.2514 [ 151.892476][T10914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=10914 comm=syz.4.2514 [ 151.906738][T10914] loop4: detected capacity change from 0 to 128 [ 151.913807][T10914] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.208971][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'. [ 152.691439][T10945] random: crng reseeded on system resumption [ 152.792901][T10959] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2535'. [ 152.801958][T10959] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2535'. [ 153.306043][T10986] netlink: 'syz.0.2546': attribute type 1 has an invalid length. [ 153.537320][T10992] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2547'. [ 153.546318][T10992] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2547'. [ 153.605943][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 153.605956][ T29] audit: type=1400 audit(1720307739.374:1172): avc: denied { read write } for pid=9271 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.635320][ T29] audit: type=1400 audit(1720307739.374:1173): avc: denied { open } for pid=9271 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.658716][ T29] audit: type=1400 audit(1720307739.374:1174): avc: denied { ioctl } for pid=9271 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1054 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.898842][ T29] audit: type=1400 audit(1720307739.633:1175): avc: denied { ioctl } for pid=11003 comm="syz.2.2554" path="socket:[39042]" dev="sockfs" ino=39042 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 154.000691][T11011] loop4: detected capacity change from 0 to 512 [ 154.077788][T11011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.130001][T11011] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.169092][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.192731][ T29] audit: type=1326 audit(1720307739.919:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 154.217637][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.232787][ T29] audit: type=1326 audit(1720307739.919:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 154.256291][ T29] audit: type=1400 audit(1720307739.919:1178): avc: denied { link } for pid=11009 comm="syz.4.2556" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.288010][ T29] audit: type=1326 audit(1720307739.992:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 154.326691][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.344005][T11031] loop2: detected capacity change from 0 to 512 [ 154.352877][T11031] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.2562: bad orphan inode 15 [ 154.363558][T11031] ext4_test_bit(bit=14, block=5) = 0 [ 154.371168][T11031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.392226][T11031] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.2562: reserved inode found cleared - inode=1 [ 154.455570][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.478276][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.491524][ T29] audit: type=1326 audit(1720307740.168:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 154.515270][ T29] audit: type=1326 audit(1720307740.168:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60163ffbd9 code=0x7ffc0000 [ 154.603897][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 154.638673][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.686460][T11048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=11048 comm=syz.4.2568 [ 154.768806][ T50] bridge_slave_1: left allmulticast mode [ 154.774530][ T50] bridge_slave_1: left promiscuous mode [ 154.780249][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.793668][ T50] bridge_slave_0: left allmulticast mode [ 154.799367][ T50] bridge_slave_0: left promiscuous mode [ 154.805101][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.962101][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.974362][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.985979][ T50] bond0 (unregistering): Released all slaves [ 154.997534][T11022] chnl_net:caif_netlink_parms(): no params data found [ 155.026395][T11074] loop1: detected capacity change from 0 to 512 [ 155.037263][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.037778][T11074] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2576: Parent and EA inode have the same ino 15 [ 155.044354][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.058080][T11074] EXT4-fs (loop1): 1 orphan inode deleted [ 155.064613][T11022] bridge_slave_0: entered allmulticast mode [ 155.069869][T11074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.076452][T11022] bridge_slave_0: entered promiscuous mode [ 155.094554][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.098632][T11074] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.2576: corrupted in-inode xattr: invalid ea_ino [ 155.101809][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.122389][T11022] bridge_slave_1: entered allmulticast mode [ 155.129241][T11022] bridge_slave_1: entered promiscuous mode [ 155.129244][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.150963][ T50] hsr_slave_0: left promiscuous mode [ 155.156514][ T50] hsr_slave_1: left promiscuous mode [ 155.162144][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.169531][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.176886][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.184283][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.193253][ T50] veth1_macvtap: left promiscuous mode [ 155.198835][ T50] veth0_macvtap: left promiscuous mode [ 155.204313][ T50] veth1_vlan: left promiscuous mode [ 155.209523][ T50] veth0_vlan: left promiscuous mode [ 155.310548][ T50] team0 (unregistering): Port device team_slave_1 removed [ 155.321112][ T50] team0 (unregistering): Port device team_slave_0 removed [ 155.376675][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.391771][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.420263][T11022] team0: Port device team_slave_0 added [ 155.432702][T11022] team0: Port device team_slave_1 added [ 155.458995][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.466003][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.492146][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.506931][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.513928][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.539833][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.566982][T11022] hsr_slave_0: entered promiscuous mode [ 155.573792][T11022] hsr_slave_1: entered promiscuous mode [ 155.579807][T11022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.587513][T11022] Cannot create hsr debugfs directory [ 155.615967][T11102] qrtr: Invalid version 6 [ 155.631845][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2589'. [ 155.657206][T11106] loop4: detected capacity change from 0 to 512 [ 155.665745][T11104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=11104 comm=syz.0.2589 [ 155.666422][T11106] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.2590: bad orphan inode 15 [ 155.689490][T11106] ext4_test_bit(bit=14, block=5) = 0 [ 155.695156][T11106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.731890][T11106] EXT4-fs error (device loop4): __ext4_new_inode:1070: comm syz.4.2590: reserved inode found cleared - inode=1 [ 155.732564][T11111] loop2: detected capacity change from 0 to 256 [ 155.769661][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.023282][T11122] veth0_vlan: left promiscuous mode [ 156.071332][T11122] veth0_vlan: entered promiscuous mode [ 156.149717][T11022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.190484][T11139] loop2: detected capacity change from 0 to 512 [ 156.205749][T11022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.233332][T11139] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 156.246598][T11139] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.286740][T11142] loop4: detected capacity change from 0 to 512 [ 156.295552][T11022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.304999][T11022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.317308][T11142] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 156.325838][T11139] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.2603: Failed to acquire dquot type 1 [ 156.337853][T11142] EXT4-fs (loop4): invalid journal inode [ 156.343907][T11139] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2603: bg 0: block 40: padding at end of block bitmap is not set [ 156.344167][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.360094][T11139] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 156.369957][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.380908][T11139] EXT4-fs (loop2): 1 truncate cleaned up [ 156.387078][T11139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.411331][T11142] sctp: [Deprecated]: syz.4.2604 (pid 11142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.411331][T11142] Use struct sctp_sack_info instead [ 156.412860][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.434853][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.445172][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.452251][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.460533][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.468716][T11142] netlink: 'syz.4.2604': attribute type 3 has an invalid length. [ 156.477342][T11142] netlink: 'syz.4.2604': attribute type 3 has an invalid length. [ 156.485137][T11142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2604'. [ 156.646671][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.787971][T11022] veth0_vlan: entered promiscuous mode [ 156.826756][T11022] veth1_vlan: entered promiscuous mode [ 156.841807][T11022] veth0_macvtap: entered promiscuous mode [ 156.848922][T11022] veth1_macvtap: entered promiscuous mode [ 156.864649][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.875166][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.885080][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.895544][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.906589][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.917570][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.928055][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.937890][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.948366][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.959592][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.960298][T11193] qrtr: Invalid version 6 [ 156.972028][T11022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.981059][T11022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.989952][T11022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.998642][T11022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.669330][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 157.731556][T11251] Process accounting resumed [ 157.738124][T11247] team1: Mode changed to "roundrobin" [ 157.838354][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 157.974612][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 158.022115][T11316] team2: Mode changed to "roundrobin" [ 158.150194][T11341] Process accounting resumed [ 158.779295][T11381] Process accounting resumed [ 158.850733][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2707'. [ 158.890621][T11391] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2708'. [ 158.904096][T11391] macvtap1: entered promiscuous mode [ 158.909477][T11391] team0: entered promiscuous mode [ 158.914813][T11391] team_slave_0: entered promiscuous mode [ 158.920833][T11391] team_slave_1: entered promiscuous mode [ 158.927048][T11391] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 158.935394][T11391] team0: Device macvtap1 is already an upper device of the team interface [ 158.947475][T11391] team0: left promiscuous mode [ 158.952263][T11391] team_slave_0: left promiscuous mode [ 158.957712][T11391] team_slave_1: left promiscuous mode [ 159.050926][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.062084][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 159.062096][ T29] audit: type=1326 audit(1720307744.414:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab16ceebd9 code=0x7fc00000 [ 159.116773][T11420] loop3: detected capacity change from 0 to 164 [ 159.125088][T11420] rock: directory entry would overflow storage [ 159.131347][T11420] rock: sig=0x5245, size=8, remaining=3 [ 159.138871][T11420] ISOFS: unable to read i-node block [ 159.147430][T11424] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2723'. [ 159.226294][T11424] macvtap1: entered promiscuous mode [ 159.226349][T11424] team0: entered promiscuous mode [ 159.226359][T11424] team_slave_0: entered promiscuous mode [ 159.226495][T11424] team_slave_1: entered promiscuous mode [ 159.226769][T11424] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 159.230970][T11424] team0: Device macvtap1 is already an upper device of the team interface [ 159.231625][T11424] team0: left promiscuous mode [ 159.231640][T11424] team_slave_0: left promiscuous mode [ 159.231676][T11424] team_slave_1: left promiscuous mode [ 159.242564][T11432] Process accounting resumed [ 159.394936][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'. [ 159.435161][T11457] Process accounting resumed [ 159.514409][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2751'. [ 159.543604][T11489] Process accounting resumed [ 159.620386][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 159.653633][T11518] Process accounting resumed [ 159.673253][T11524] syz.4.2771 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.738153][T11512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2756'. [ 159.904722][T11548] qrtr: Invalid version 6 [ 159.920636][ T29] audit: type=1326 audit(1720307745.189:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7fc00000 [ 159.944288][ T29] audit: type=1326 audit(1720307745.189:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e9343abd9 code=0x7fc00000 [ 160.035179][T11553] dummy0: entered promiscuous mode [ 160.040528][T11553] vlan0: entered promiscuous mode [ 160.047716][T11553] dummy0: left promiscuous mode [ 160.127426][T11555] loop0: detected capacity change from 0 to 512 [ 160.135376][T11555] EXT4-fs (loop0): 1 truncate cleaned up [ 160.142114][T11555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.156333][ T29] audit: type=1400 audit(1720307745.420:1270): avc: denied { link } for pid=11554 comm="syz.0.2782" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 160.200751][ T29] audit: type=1326 audit(1720307745.466:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab16ceebd9 code=0x7fc00000 [ 160.202553][ T9271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.272720][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.478821][T11588] loop3: detected capacity change from 0 to 128 [ 160.494093][ T29] audit: type=1400 audit(1720307745.724:1272): avc: denied { remount } for pid=11587 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 160.522547][T11590] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2798'. [ 160.538104][T11590] macvtap1: entered promiscuous mode [ 160.543541][T11590] team0: entered promiscuous mode [ 160.548647][T11590] team_slave_0: entered promiscuous mode [ 160.554759][T11590] team_slave_1: entered promiscuous mode [ 160.581828][T11590] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 160.590550][T11590] team0: Device macvtap1 is already an upper device of the team interface [ 160.619744][T11590] team0: left promiscuous mode [ 160.624624][T11590] team_slave_0: left promiscuous mode [ 160.630137][T11590] team_slave_1: left promiscuous mode [ 160.645192][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.666679][ T29] audit: type=1326 audit(1720307745.890:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7fc00000 [ 160.690664][ T29] audit: type=1326 audit(1720307745.890:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4e9343abd9 code=0x7fc00000 [ 160.714186][ T29] audit: type=1326 audit(1720307745.890:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7fc00000 [ 160.737637][ T29] audit: type=1326 audit(1720307745.890:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.4.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7fc00000 [ 160.813703][T11601] netlink: 'syz.1.2804': attribute type 2 has an invalid length. [ 160.826479][T11602] loop2: detected capacity change from 0 to 512 [ 160.872949][T11602] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.2803: corrupted in-inode xattr: invalid ea_ino [ 160.895884][T11602] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2803: couldn't read orphan inode 15 (err -117) [ 160.918858][T11602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.008075][T11602] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #18: comm syz.2.2803: Siphash requires key [ 161.019729][T11602] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #18: comm syz.2.2803: Siphash requires key [ 161.059096][T11602] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #18: comm syz.2.2803: Siphash requires key [ 161.219745][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.285072][T11632] vlan2: entered promiscuous mode [ 161.377684][T11635] netlink: 'syz.1.2818': attribute type 2 has an invalid length. [ 161.487718][T11643] dccp_close: ABORT with 29 bytes unread [ 161.502012][T11648] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2822'. [ 161.912334][T11675] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2833'. [ 161.937921][T11680] loop0: detected capacity change from 0 to 128 [ 162.367641][T11701] dummy0: entered promiscuous mode [ 162.398356][T11701] vlan2: entered promiscuous mode [ 162.445906][T11701] dummy0: left promiscuous mode [ 162.566348][T11716] loop2: detected capacity change from 0 to 8192 [ 162.592572][T11728] loop3: detected capacity change from 0 to 512 [ 162.605660][T11728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.622361][T11728] EXT4-fs (loop3): 1 truncate cleaned up [ 162.628602][T11728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.654483][T11724] loop1: detected capacity change from 0 to 8192 [ 162.692156][T11724] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 162.704205][T11724] File: /238/bus PID: 11724 Comm: syz.1.2852 [ 162.710361][T11728] loop3: detected capacity change from 512 to 11 [ 162.718138][T11740] bio_check_eod: 8 callbacks suppressed [ 162.718150][T11740] syz.3.2854: attempt to access beyond end of device [ 162.718150][T11740] loop3: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 162.757974][T11740] syz.3.2854: attempt to access beyond end of device [ 162.757974][T11740] loop3: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 162.766176][T11749] loop1: detected capacity change from 0 to 764 [ 162.777811][T11740] syz.3.2854: attempt to access beyond end of device [ 162.777811][T11740] loop3: rw=524288, sector=18, nr_sectors = 2 limit=11 [ 162.791224][T11740] syz.3.2854: attempt to access beyond end of device [ 162.791224][T11740] loop3: rw=12288, sector=16, nr_sectors = 2 limit=11 [ 162.804882][T11740] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.3.2854: unable to read itable block [ 162.838588][T11740] syz.3.2854: attempt to access beyond end of device [ 162.838588][T11740] loop3: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 162.852183][T11740] syz.3.2854: attempt to access beyond end of device [ 162.852183][T11740] loop3: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 162.866130][T11740] syz.3.2854: attempt to access beyond end of device [ 162.866130][T11740] loop3: rw=524288, sector=18, nr_sectors = 2 limit=11 [ 162.879680][T11740] syz.3.2854: attempt to access beyond end of device [ 162.879680][T11740] loop3: rw=12288, sector=16, nr_sectors = 2 limit=11 [ 162.893468][T11740] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.3.2854: unable to read itable block [ 162.909757][T11740] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 162.964825][T11740] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #15: comm syz.3.2854: mark_inode_dirty error [ 162.990299][T11740] syz.3.2854: attempt to access beyond end of device [ 162.990299][T11740] loop3: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 163.007004][T11760] loop4: detected capacity change from 0 to 512 [ 163.019598][T11760] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2865: attempt to clear invalid blocks 1 len 1 [ 163.035054][T11740] syz.3.2854: attempt to access beyond end of device [ 163.035054][T11740] loop3: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 163.041198][T11760] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2865: bg 0: block 343: padding at end of block bitmap is not set [ 163.048533][T11740] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.3.2854: unable to read itable block [ 163.076764][T11760] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 163.085643][T11740] EXT4-fs error (device loop3): ext4_get_max_inline_size:116: inode #15: comm syz.3.2854: can't get inode location 15 [ 163.093995][T11760] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2865: invalid indirect mapped block 1819239214 (level 0) [ 163.113020][T11740] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #15: block 8: comm syz.3.2854: unable to read itable block [ 163.131896][T11760] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2865: invalid indirect mapped block 1819239214 (level 1) [ 163.169276][T11774] loop0: detected capacity change from 0 to 8192 [ 163.172233][T11760] EXT4-fs (loop4): 1 truncate cleaned up [ 163.183242][T11760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.198065][ T3119] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #15: block 8: comm kworker/u8:6: unable to read itable block [ 163.219138][T11336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.228785][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.597505][T11810] loop0: detected capacity change from 0 to 512 [ 163.634334][T11813] loop2: detected capacity change from 0 to 512 [ 163.643186][T11813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.653750][T11810] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.2885: casefold flag without casefold feature [ 163.668259][T11810] EXT4-fs (loop0): Remounting filesystem read-only [ 163.674918][T11810] EXT4-fs (loop0): get root inode failed [ 163.680583][T11810] EXT4-fs (loop0): mount failed [ 163.713774][T11813] EXT4-fs (loop2): 1 truncate cleaned up [ 163.720517][T11813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.758108][T11810] loop0: detected capacity change from 0 to 1024 [ 163.764748][T11810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.771692][T11810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.781756][T11810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 163.789963][T11810] System zones: 0-1, 3-36 [ 163.794979][T11810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.807587][T11813] loop2: detected capacity change from 512 to 11 [ 163.809051][T11817] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 163.823096][T11817] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #15: comm syz.2.2886: mark_inode_dirty error [ 163.834683][T11817] EXT4-fs error (device loop2): ext4_get_max_inline_size:116: inode #15: comm syz.2.2886: can't get inode location 15 [ 163.860268][ T9314] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: Out of memory [ 163.870537][ T9314] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 163.888542][ T9314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.024187][ T3119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.036133][T11821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.104083][ T3119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.290027][ T3119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.347919][ T3119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.470332][T11820] chnl_net:caif_netlink_parms(): no params data found [ 164.473779][T11859] loop4: detected capacity change from 0 to 512 [ 164.482645][ T3119] bridge_slave_1: left allmulticast mode [ 164.484651][T11859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.488995][ T3119] bridge_slave_1: left promiscuous mode [ 164.489111][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.502960][T11859] EXT4-fs (loop4): 1 truncate cleaned up [ 164.517799][T11859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.531245][ T3119] bridge_slave_0: left allmulticast mode [ 164.536958][ T3119] bridge_slave_0: left promiscuous mode [ 164.542674][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.571054][ T9271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.588438][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.643004][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 164.643066][ T29] audit: type=1326 audit(1720307749.555:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.672655][ T29] audit: type=1326 audit(1720307749.555:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.696188][ T29] audit: type=1326 audit(1720307749.555:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.719880][ T29] audit: type=1326 audit(1720307749.555:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.743380][ T29] audit: type=1326 audit(1720307749.555:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.767041][ T29] audit: type=1326 audit(1720307749.555:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.790537][ T29] audit: type=1326 audit(1720307749.555:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.814068][ T29] audit: type=1326 audit(1720307749.555:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.837364][ T29] audit: type=1326 audit(1720307749.555:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.860850][ T29] audit: type=1326 audit(1720307749.555:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9343abd9 code=0x7ffc0000 [ 164.886863][ T3119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.898339][ T3119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.909057][ T3119] bond0 (unregistering): Released all slaves [ 164.969924][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.977031][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.993258][T11820] bridge_slave_0: entered allmulticast mode [ 164.999917][T11820] bridge_slave_0: entered promiscuous mode [ 165.064112][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.071368][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.098267][T11820] bridge_slave_1: entered allmulticast mode [ 165.105259][T11820] bridge_slave_1: entered promiscuous mode [ 165.147866][ T3119] hsr_slave_0: left promiscuous mode [ 165.173142][ T3119] hsr_slave_1: left promiscuous mode [ 165.189268][ T3119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.196666][ T3119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.206080][ T3119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.213494][ T3119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.224713][ T3119] veth1_macvtap: left promiscuous mode [ 165.230216][ T3119] veth0_macvtap: left promiscuous mode [ 165.235771][ T3119] veth1_vlan: left promiscuous mode [ 165.240996][ T3119] veth0_vlan: left promiscuous mode [ 165.342497][ T3119] team0 (unregistering): Port device team_slave_1 removed [ 165.363375][ T3119] team0 (unregistering): Port device team_slave_0 removed [ 165.375794][T11896] loop1: detected capacity change from 0 to 512 [ 165.386473][T11896] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.2908: casefold flag without casefold feature [ 165.400027][T11896] EXT4-fs (loop1): Remounting filesystem read-only [ 165.406578][T11896] EXT4-fs (loop1): get root inode failed [ 165.412305][T11896] EXT4-fs (loop1): mount failed [ 165.424029][T11826] chnl_net:caif_netlink_parms(): no params data found [ 165.452793][T11820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.469402][T11820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.678233][T11896] loop1: detected capacity change from 0 to 1024 [ 165.686569][T11896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.693750][T11896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.704601][T11896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 165.714156][T11896] System zones: 0-1, 3-36 [ 165.723577][T11896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.752117][T11820] team0: Port device team_slave_0 added [ 165.779784][T11910] loop0: detected capacity change from 0 to 512 [ 165.786780][T11910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.799182][T11820] team0: Port device team_slave_1 added [ 165.810506][T11910] EXT4-fs (loop0): 1 truncate cleaned up [ 165.818032][T11910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.844583][ T9271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.860191][T11820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.867162][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.893117][T11820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.907189][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.914367][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.922915][T11826] bridge_slave_0: entered allmulticast mode [ 165.929769][T11826] bridge_slave_0: entered promiscuous mode [ 165.937828][T11820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.944806][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.970697][T11820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.983320][T11913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.048897][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.056018][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.065272][T11826] bridge_slave_1: entered allmulticast mode [ 166.072531][T11826] bridge_slave_1: entered promiscuous mode [ 166.113905][T11820] hsr_slave_0: entered promiscuous mode [ 166.125559][T11820] hsr_slave_1: entered promiscuous mode [ 166.131541][T11820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.139214][T11820] Cannot create hsr debugfs directory [ 166.147102][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.274358][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.329314][T11826] team0: Port device team_slave_0 added [ 166.338082][ T9234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.349715][T11826] team0: Port device team_slave_1 added [ 166.376872][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.383843][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.409767][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.436237][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.443321][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.469279][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.515177][T11826] hsr_slave_0: entered promiscuous mode [ 166.521816][T11826] hsr_slave_1: entered promiscuous mode [ 166.527856][T11826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.536514][T11826] Cannot create hsr debugfs directory [ 166.593687][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2924'. [ 166.648845][ T3119] bridge_slave_1: left allmulticast mode [ 166.654519][ T3119] bridge_slave_1: left promiscuous mode [ 166.660115][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.668071][ T3119] bridge_slave_0: left allmulticast mode [ 166.673847][ T3119] bridge_slave_0: left promiscuous mode [ 166.679560][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.727249][ T3119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.736450][ T3119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.745561][ T3119] bond0 (unregistering): Released all slaves [ 166.753544][ T3119] bond1 (unregistering): Released all slaves [ 166.869126][ T3119] hsr_slave_0: left promiscuous mode [ 166.874853][ T3119] hsr_slave_1: left promiscuous mode [ 166.880929][ T3119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.889454][ T3119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.896974][ T3119] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 166.903867][ T3119] batman_adv: batadv0: Removing interface: ipvlan2 [ 166.912618][T11962] loop4: detected capacity change from 0 to 512 [ 166.933425][T11962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.946211][T11962] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.959841][T11962] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2931: corrupted inode contents [ 166.972949][T11962] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.2931: mark_inode_dirty error [ 166.984495][ T3119] team0 (unregistering): Port device team_slave_1 removed [ 166.984961][T11962] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2931: corrupted inode contents [ 167.003566][T11962] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2931: mark_inode_dirty error [ 167.003700][ T3119] team0 (unregistering): Port device team_slave_0 removed [ 167.027661][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.078324][T11966] loop4: detected capacity change from 0 to 512 [ 167.085308][T11966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.096578][T11966] EXT4-fs (loop4): 1 orphan inode deleted [ 167.102527][T11966] EXT4-fs (loop4): 1 truncate cleaned up [ 167.108806][T11966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.143550][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2934'. [ 167.144034][T11966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2932'. [ 167.197088][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.250380][T11975] loop4: detected capacity change from 0 to 1024 [ 167.257048][T11975] EXT4-fs: Ignoring removed nobh option [ 167.263156][T11975] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 167.286683][T11820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.295213][T11820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.298341][T11979] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.310342][T11820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.328797][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.339992][T11820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.393852][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.411689][T11820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.445150][T11820] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.456725][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.463804][T10360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.473906][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.481029][T10360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.490061][T11996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2946'. [ 167.505577][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.543383][T11820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.553850][T11820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.572916][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.614738][T11820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.645246][T11826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.661049][T11826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.669408][T11826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.678094][T11826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.690469][T11975] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.701911][T11975] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.720859][T11975] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.735454][T12028] tmpfs: Bad value for 'mpol' [ 167.738212][T11975] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.759608][T11820] veth0_vlan: entered promiscuous mode [ 167.770319][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 167.783026][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2956'. [ 167.784541][T11820] veth1_vlan: entered promiscuous mode [ 167.804124][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2957'. [ 167.813209][T12032] tc_dump_action: action bad kind [ 167.820746][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.842949][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.854618][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.861671][T10361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.872764][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.875108][T12036] loop4: detected capacity change from 0 to 512 [ 167.879824][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.895484][T12036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 167.898161][T11820] veth0_macvtap: entered promiscuous mode [ 167.907853][T12036] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.2959: Failed to acquire dquot type 0 [ 167.911113][T11820] veth1_macvtap: entered promiscuous mode [ 167.925479][T12036] EXT4-fs (loop4): 1 truncate cleaned up [ 167.945248][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.947250][T12036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.955704][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.955716][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.988313][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.000276][T11820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.010731][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.021245][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.031136][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.041590][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.051912][T10711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.052977][T11820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.072399][T12039] vlan2: entered promiscuous mode [ 168.077954][T12039] bond0: (slave vlan2): Opening slave failed [ 168.092840][T11820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.101668][T11820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.110323][T11820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.119072][T11820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.161432][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.179040][T12051] program syz.1.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.179108][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 168.262428][T12064] loop1: detected capacity change from 0 to 1024 [ 168.269711][T12064] EXT4-fs: Ignoring removed nobh option [ 168.272849][T11826] veth0_vlan: entered promiscuous mode [ 168.281599][T12064] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 168.284957][T11826] veth1_vlan: entered promiscuous mode [ 168.308103][T11826] veth0_macvtap: entered promiscuous mode [ 168.315333][T11826] veth1_macvtap: entered promiscuous mode [ 168.326948][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.337568][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.347380][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.357891][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.367740][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.378232][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.390790][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.402914][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.413353][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.423158][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.433873][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.443673][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.454165][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.465601][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.475525][T11826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.484467][T11826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.493244][T11826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.502122][T11826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.597991][T12077] loop0: detected capacity change from 0 to 512 [ 168.650586][T12081] vlan0: entered promiscuous mode [ 168.656032][T12081] batadv0: entered promiscuous mode [ 168.662185][T12081] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 168.684120][T12086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2972'. [ 168.693116][T12086] tc_dump_action: action bad kind [ 168.709494][T12089] loop0: detected capacity change from 0 to 512 [ 168.716265][T12089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.727181][T12089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 168.735676][T12089] System zones: 1-12 [ 168.740328][T12089] EXT4-fs (loop0): 1 truncate cleaned up [ 168.812236][T12095] loop1: detected capacity change from 0 to 512 [ 168.819888][T12095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.826953][T12095] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.2975: Failed to acquire dquot type 0 [ 168.838932][T12095] EXT4-fs (loop1): 1 truncate cleaned up [ 168.907120][T12100] futex_wake_op: syz.1.2977 tries to shift op by -1; fix this program [ 168.942300][T12106] loop1: detected capacity change from 0 to 512 [ 168.949688][T12106] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.2980: casefold flag without casefold feature [ 168.962856][T12106] EXT4-fs (loop1): Remounting filesystem read-only [ 168.969443][T12106] EXT4-fs (loop1): get root inode failed [ 168.975117][T12106] EXT4-fs (loop1): mount failed [ 169.050289][T12106] loop1: detected capacity change from 0 to 1024 [ 169.056818][T12106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.063653][T12106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.073703][T12106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 169.081939][T12106] System zones: 0-1, 3-36 [ 169.282276][T12114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.448856][T12111] Invalid ELF header magic: != ELF [ 169.661655][T12128] loop3: detected capacity change from 0 to 512 [ 169.668323][T12128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.679331][T12128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 169.687499][T12128] System zones: 1-12 [ 169.691693][T12128] EXT4-fs (loop3): 1 truncate cleaned up [ 169.944996][T12164] netlink: 'syz.2.3001': attribute type 4 has an invalid length. [ 169.973779][T12164] netlink: 'syz.2.3001': attribute type 17 has an invalid length. [ 170.090051][T12192] loop0: detected capacity change from 0 to 128 [ 170.099872][T12192] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 170.201269][T12205] netlink: 'syz.0.3015': attribute type 4 has an invalid length. [ 170.213197][T12205] netlink: 'syz.0.3015': attribute type 17 has an invalid length. [ 170.501780][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 170.501795][ T29] audit: type=1400 audit(1720307754.964:1387): avc: denied { write } for pid=12225 comm="syz.3.3024" path="socket:[45143]" dev="sockfs" ino=45143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.865986][T12254] netlink: 'syz.3.3035': attribute type 10 has an invalid length. [ 170.876118][T12254] team0: Device hsr_slave_0 failed to register rx_handler [ 171.014290][ T29] audit: type=1400 audit(1720307755.434:1388): avc: denied { listen } for pid=12260 comm="syz.2.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.017247][T12261] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 171.042668][T12261] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 171.070957][T12264] loop1: detected capacity change from 0 to 1024 [ 171.078186][T12264] EXT4-fs: Mount option(s) incompatible with ext2 [ 171.204975][T12285] loop1: detected capacity change from 0 to 1024 [ 171.212805][T12289] loop3: detected capacity change from 0 to 256 [ 171.222881][T12285] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2843c118, mo2=0002] [ 171.231118][T12285] System zones: 0-1, 3-12 [ 171.368524][T12313] bridge0: entered promiscuous mode [ 171.373367][T12314] loop3: detected capacity change from 0 to 1024 [ 171.380938][T12314] EXT4-fs: Mount option(s) incompatible with ext2 [ 171.387722][T12313] bond0: entered promiscuous mode [ 171.392783][T12313] bond_slave_0: entered promiscuous mode [ 171.398562][T12313] bond_slave_1: entered promiscuous mode [ 171.406051][T12313] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 171.416162][T12313] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 171.500907][T12323] loop3: detected capacity change from 0 to 256 [ 171.518892][T12325] syzkaller1: entered promiscuous mode [ 171.524382][T12325] syzkaller1: entered allmulticast mode [ 171.530617][T12325] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 171.551093][T12325] tmpfs: Bad value for 'gid' [ 171.739803][T12341] loop1: detected capacity change from 0 to 512 [ 171.746483][T12341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.757132][T12341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 171.765171][T12341] System zones: 1-12 [ 171.769596][T12341] EXT4-fs (loop1): 1 truncate cleaned up [ 171.793841][ T29] audit: type=1326 audit(1720307756.154:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12344 comm="syz.3.3070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc6ca0dbd9 code=0x0 [ 171.865078][T12347] netlink: 'syz.1.3071': attribute type 10 has an invalid length. [ 171.873785][T12347] team0: Device hsr_slave_0 failed to register rx_handler [ 172.110629][T12353] loop1: detected capacity change from 0 to 1024 [ 172.117737][T12353] EXT4-fs: Mount option(s) incompatible with ext2 [ 172.428715][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'. [ 172.448581][T12375] loop3: detected capacity change from 0 to 256 [ 172.674870][T12375] loop3: detected capacity change from 0 to 8192 [ 172.926982][T12384] loop3: detected capacity change from 0 to 256 [ 173.206929][ T29] audit: type=1326 audit(1720307757.465:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.3.3094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc6ca0dbd9 code=0x0 [ 173.826712][T12415] ================================================================== [ 173.834794][T12415] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 173.841889][T12415] [ 173.844194][T12415] write to 0xffff888101ef5780 of 8 bytes by task 12416 on cpu 0: [ 173.851889][T12415] exit_mm+0x9c/0x190 [ 173.855853][T12415] do_exit+0x556/0x1710 [ 173.859990][T12415] do_group_exit+0x102/0x150 [ 173.864559][T12415] get_signal+0xf2f/0x1080 [ 173.868961][T12415] arch_do_signal_or_restart+0x95/0x4b0 [ 173.874487][T12415] syscall_exit_to_user_mode+0x59/0x130 [ 173.880016][T12415] do_syscall_64+0xd6/0x1c0 [ 173.884504][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.890385][T12415] [ 173.892690][T12415] read to 0xffff888101ef5780 of 8 bytes by task 12415 on cpu 1: [ 173.900298][T12415] mm_update_next_owner+0x1c9/0x450 [ 173.905479][T12415] exit_mm+0xdc/0x190 [ 173.909441][T12415] do_exit+0x556/0x1710 [ 173.913578][T12415] do_group_exit+0x142/0x150 [ 173.918150][T12415] __x64_sys_exit_group+0x1f/0x20 [ 173.923154][T12415] x64_sys_call+0x27f9/0x2d70 [ 173.927814][T12415] do_syscall_64+0xc9/0x1c0 [ 173.932300][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.938177][T12415] [ 173.940479][T12415] value changed: 0xffff888108636a00 -> 0x0000000000000000 [ 173.947561][T12415] [ 173.949864][T12415] Reported by Kernel Concurrency Sanitizer on: [ 173.955990][T12415] CPU: 1 PID: 12415 Comm: syz.0.3096 Tainted: G W 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 173.967597][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 173.977632][T12415] ================================================================== [ 173.990574][T12417] loop3: detected capacity change from 0 to 256 [ 174.054472][T12417] loop3: detected capacity change from 0 to 8192