last executing test programs: 2.823004536s ago: executing program 2: socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x4000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000800100000000000001000000760000000e000000160000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00000cf000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/hdaudio', 0x608000, 0x86) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000000c0)=0x45, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="e1a83c30ad3670ec43a4045fe376", 0xe}], 0x1}, 0x20040050) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r7 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x8c) syz_emit_ethernet(0x36, 0x0, 0x0) 2.655538832s ago: executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001600000000000000670000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 2.566118946s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) getgid() r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, 0x0, 0x0, 0x0) getresuid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000240), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 2.506150245s ago: executing program 2: fchdir(0xffffffffffffffff) r0 = socket(0x11, 0x80000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000240)='./bus\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x7dc0b000) r4 = creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write$P9_RREADDIR(r3, &(0x7f0000000280)={0xb, 0x29, 0xffff, {0x200738f}}, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x1670e68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x16000}]) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x401, 0x101301) ioctl$USBDEVFS_BULK(r9, 0x80045503, &(0x7f0000000080)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r7, 0x0, r8, 0x0, 0x104ff, 0x0) 2.124555764s ago: executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) epoll_create1(0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6908, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.993933174s ago: executing program 2: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.969328488s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) ptrace$getenv(0x4204, r1, 0x2, &(0x7f0000000000)) 1.818147151s ago: executing program 4: socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.791731315s ago: executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}]}, 0x28}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x29, &(0x7f0000000180), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ftruncate(r6, 0x8001) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, &(0x7f0000001040)) 1.766622469s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000180)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 1.69512536s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53eb", 0x1c, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000b2c600000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x0, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r4, 0x7, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.520471377s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x88a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x0, 0x0, @empty}, 0x34) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) recvmsg(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000025000000080001007063690011000200303030303a30303a31302e300000000008008c00000000000e0001006e650f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x60}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xfffffec9, r12, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0xffffff6a}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x800) 1.458565506s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="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", 0x249}], 0x1}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @random="30185c73ee10"}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x2, 0x6, @local}, 0x10) 1.401658545s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.340733784s ago: executing program 0: statx(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x5c00, &(0x7f0000003680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000340)}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x31, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0xa1840, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000005b00)=0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffd) sendfile(r2, r3, 0x0, 0x1000000201005) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000014) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x2, {0x2, 0x0, @empty}, 'caif0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"0800000000000100fd25251c00000001"}}}}, 0x118) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f0000000280), 0x0}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x4c}, {0x5}, {0x0, 0x0, 0x0, 0xffffefff}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) 896.996162ms ago: executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}, {0x0}], 0x2) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x32) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x3f, 0x101081) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, 0x0, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0xfffffffffffffd98) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') writev(r3, &(0x7f0000000580)=[{&(0x7f0000000440)="8e", 0x1}], 0x1) read$rfkill(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000009900000001000000", @ANYRES64], 0x110) 873.808206ms ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000200)={0x18, 0x2, {0x0, @random="db3d3cc9903e", 'netpci0\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) 851.781269ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) getgid() r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, 0x0, 0x0, 0x0) getresuid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 778.20355ms ago: executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "ec28a144f13d7607"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x54}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r8 = dup(0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000040)=0xfff, 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 719.73953ms ago: executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='a'], 0xa) clock_getres(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x1}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x2, 0x0, 0x0, 0x900}, 0x0) 719.22979ms ago: executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/181, 0xb5) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x300}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @rand_addr=0x7e000000}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @local}, 0x91d1a35871ddc624, 0x0, 0x0, 0x0, 0xfffe, &(0x7f00000000c0)='xfrm0\x00', 0x76, 0xfffffffffffffff7, 0x6}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'bond_slave_1\x00', 0x0}) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000000200)) ioctl$int_in(r4, 0x5421, &(0x7f00000002c0)=0x8001) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000008140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x3a1d7ac040a3ef56}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@delqdisc={0x88, 0x25, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xa, 0xc}, {0xffe0, 0xffff}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3f, 0x3, 0xaa, 0x1, 0x80, 0x3f, 0x5}}, {0xe, 0x2, [0x2, 0x100, 0x1ff, 0x0, 0x80]}}, {{0x1c, 0x1, {0x2, 0x7f, 0x1, 0x1, 0x2, 0x7, 0x9, 0x5}}, {0xe, 0x2, [0x3a2b, 0x81, 0x5, 0x6, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x20000045) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0xfffffffffffffcd8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0xfffffffffffffce5}}]}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYRES64=r5, @ANYRESHEX, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x28048810}, 0x20080810) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r8, 0x0, 0x81, 0x1f, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000}, 0x8000, 0x0, 0x0, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0), 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000890) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000900)={0x6, 0x2, 0x2, 0x3f, 0x12, "95c9f05afbd65b2fd39ceec7e60f30c5ee6c0e"}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000001340)="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", 0xfffffffffffffeb1}], 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc0000001900000428bd7000fddbdf251d01000008000a00", @ANYRES32=r9, @ANYBLOB="1500040004000080050000003e1b39d972a768720000000015000200030000e005020000dd43070bcbab3ed9050000000c000b00020000000200008015000300010000a007020000a71ffc9eb492e5730000000005000d006900000008000e00", @ANYRES32=0x0, @ANYBLOB="15000300030000e0050300002f9d13a3fec4d461040000001500030004000040060300003958750000319121020000000c000b0004cf7420000000207b091e60d9df5260fea4785090f7b5e409fced62e829fb7642d8dbd5621726311ccf78f015ec7f801231cfa5e4c3521fab1822af44b9ca87c3775a8369fbdbfa64241cc96b15a607132818bfe009208c94a3086b62f8f48b455e836855ae87e4343356a3aaf9331043b6e7223654b0a9356e81622693be"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 693.454374ms ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) epoll_create1(0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6908, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x1b3f, 0x0, &(0x7f0000000040), &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 616.610915ms ago: executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0xffffffffffffffff) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) acct(&(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x8}, 0x0) 591.315529ms ago: executing program 1: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 515.315241ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8}]}], {0x14}}, 0x74}}, 0x0) 495.140794ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 464.524679ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000180)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 461.361249ms ago: executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000340)=@phonet={0x23, 0x0, 0x80, 0x6c}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)="b108fb51aec589e897500517311a9c1b2a29afceb8576930a36527fa8e9c99c600a11fa5652ccd31f6c1b11f00bcaa0c84006332ee6c18316c1c83cc4135e17fc6689819103380de47750e979174d72a7604498c87dd315bc8720fdde04e7a47275dbab4cf87326654f372f4a04e8a5774c9c610782022469f4f5b825f1d6a1c235360f6e67bfc4ac6babfdd109d19da1348c6ef282dd46108b41531d609778ffc4c98845070a0314632b63ccb8b7a67e854e3f5c7a52c37d52a1354d5d622e9f097eb59c7b02822dc4f61ba8655bfda0c5dad1c2bf6524ae65e28a46f2a1229402ff17a3d1416c1989d7da63e553bdf11dc5dfa8c74d55642", 0xf9}, {&(0x7f00000004c0)="ce8272b9aedbc8ed126c5ae86ee73c491732167a1e04f7bdda145d6c40", 0x1d}, {&(0x7f0000000500)="ab82b245b41fc696826e99538efcece5e4601bc21fbfff4a0ca574e590a6b3e864784be57b28fb98267d115fb6f1d467c943b55fdaa01679b06b5976987db47f37de9418103acb31160080c16837c11dbb33aaaa6f6c0010cd8f250f9c94448cdd4ef0f21aafd4b3bb24bd55b5", 0x6d}, {&(0x7f0000000580)="e3669cc26735ea285fb886ea742a39534ad1bffa833047e5341c9d05374d", 0x1e}, {&(0x7f00000005c0)="534ce494fb127c8bc3335e4fba624cc3ce9dcbbaf9fbd0e326606130477b5c741c", 0x21}, {&(0x7f0000000600)="d3e143e75b93ecbe8a2cf9cc62c4dcf90dd3ffbcb3d909e29b777d7fd1f68d6849f7f979bfbbdddb181473dbbacf386ea05353b1192214c999bda07eff4f07a5a8161a12a078a171d73cd4626da71afa9b78937a230b8beacc0598ba54bfe9ff50171e9e7278fd034e588243a81cb9da69159b62041e370be57d48a3a7ee1421b709254a3b92162f2634668cb93c6767d6f1c43f3a54f1c79d94e69ad3f9be", 0x9f}, {&(0x7f00000006c0)="84897f3024278f324f", 0x9}, {&(0x7f0000000700)="aa4b8f12653c9bc01bd04db44549885a74f37ee2c31fd356297138973d54c5e5632a004efb5be097ce6082c1cac721fc36feccbccfc266786578472be9c79c9b74414eafe203bd298852c1af029b4d261195810a74f1056d00b08bcadb7ade39727400cac7bee3a65aa77d683c97e63cd725bffcfb2d9015e2bef7cd4d87f761f2da01cd486919f002109255dffe5521b88c51951bf9de51f83fdcee9277a1e83f9e9102ddca3ac255f0d291c32a2147b478a7b7a38acd6df2ea137174c3cd7eff19f1cb5533b533109a81f597d87e872e963763a10f385b6094c4024bcb15609cefeaa51c92a52300fe6c6f4b98a3345a6c5f94cbd89ca695", 0xf9}], 0x8}, 0x404c000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x5}, 0x20) 390.19046ms ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53eb", 0x1c, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000b2c600000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x0, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r4, 0x7, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 4: rename(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x85, &(0x7f0000001400)={r3}, &(0x7f00000014c0)=0xb0) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) setreuid(0xee00, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getpid() r6 = getuid() setreuid(0xee00, r6) kernel console output (not intermixed with test programs): r/w without journal. Quota mode: none. [ 108.871885][ T6485] ext4 filesystem being mounted at /root/syzkaller-testdir2554868329/syzkaller.j4fTZa/119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.470944][ T6496] loop3: detected capacity change from 0 to 128 [ 109.497204][ T6496] ext4 filesystem being mounted at /root/syzkaller-testdir2554868329/syzkaller.j4fTZa/121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.624496][ T6503] loop1: detected capacity change from 0 to 128 [ 109.667907][ T6503] ext4 filesystem being mounted at /root/syzkaller-testdir3335110388/syzkaller.IzPuMV/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.714403][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.724021][ T6506] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.746295][ T6496] loop3: detected capacity change from 128 to 64 [ 109.759088][ T6496] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 109.779261][ T6496] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 109.801106][ T6496] EXT4-fs error (device loop3): ext4_evict_inode:251: inode #13: comm syz-executor.3: mark_inode_dirty error [ 109.817938][ T6510] loop0: detected capacity change from 0 to 1024 [ 109.829991][ T6508] loop2: detected capacity change from 0 to 2048 [ 109.838692][ T6496] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -12) [ 109.851936][ T6511] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 109.861955][ T6511] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 109.888040][ T6511] EXT4-fs error (device loop3): ext4_evict_inode:251: inode #14: comm syz-executor.3: mark_inode_dirty error [ 109.900161][ T6511] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -12) [ 109.937551][ T4968] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 109.957896][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 109.966365][ T4968] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 109.987378][ T6516] 9pnet_fd: Insufficient options for proto=fd [ 110.031428][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 8192 [ 110.062169][ T5915] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor.1: Directory block failed checksum [ 110.075968][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 110.091895][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 8192 [ 110.110783][ T5915] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor.1: Directory block failed checksum [ 110.124367][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 110.138972][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 8192 [ 110.153564][ T5915] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor.1: Directory block failed checksum [ 110.169362][ T5915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 110.187374][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.202894][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.283920][ T6520] loop0: detected capacity change from 0 to 8192 [ 110.356472][ T6520] loop0: p1 p2 p3 p4 [ 110.363310][ T6520] loop0: p1 start 17760256 is beyond EOD, truncated [ 110.369982][ T6520] loop0: p2 size 64053 extends beyond EOD, truncated [ 110.381819][ T6525] loop4: detected capacity change from 0 to 256 [ 110.382578][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.390604][ T6520] loop0: p3 start 458496 is beyond EOD, truncated [ 110.405622][ T6520] loop0: p4 size 50331648 extends beyond EOD, truncated [ 110.480211][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.550202][ T6536] loop0: detected capacity change from 0 to 512 [ 110.558454][ T6536] EXT4-fs (loop0): filesystem is read-only [ 110.559235][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.565464][ T6536] EXT4-fs (loop0): filesystem is read-only [ 110.580621][ T6536] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.621403][ T6536] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 16 [ 110.674971][ T6536] ext4_test_bit(bit=15, block=3) = 0 [ 110.725563][ T6526] lo speed is unknown, defaulting to 1000 [ 111.037942][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.050916][ T50] bond_slave_0: left promiscuous mode [ 111.079379][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.108110][ T50] bond_slave_1: left promiscuous mode [ 111.126083][ T50] bond0 (unregistering): Released all slaves [ 111.150859][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.158118][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.185730][ T6542] bridge0: entered promiscuous mode [ 111.277260][ T50] IPVS: stopping backup sync thread 5306 ... [ 111.305004][ T6558] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.343582][ T50] hsr_slave_0: left promiscuous mode [ 111.355961][ T50] hsr_slave_1: left promiscuous mode [ 111.361549][ T6558] loop4: detected capacity change from 0 to 1024 [ 111.368367][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.376045][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.377808][ T6558] EXT4-fs: Ignoring removed orlov option [ 111.388903][ T6558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.395838][ T6558] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 111.395935][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.412994][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.423654][ T50] veth1_macvtap: left promiscuous mode [ 111.429397][ T50] veth0_macvtap: left promiscuous mode [ 111.434931][ T50] *: left promiscuous mode [ 111.439436][ T50] veth0_vlan: left promiscuous mode [ 111.503463][ T6568] loop4: detected capacity change from 0 to 128 [ 111.550782][ T50] team0 (unregistering): Port device team_slave_1 removed [ 111.564834][ T50] team0 (unregistering): Port device team_slave_0 removed [ 111.668323][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 111.710180][ T6551] lo speed is unknown, defaulting to 1000 [ 111.750443][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.757764][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.775260][ T6526] bridge_slave_0: entered allmulticast mode [ 111.781932][ T6526] bridge_slave_0: entered promiscuous mode [ 111.789037][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.796176][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.803488][ T6526] bridge_slave_1: entered allmulticast mode [ 111.806642][ T6586] loop4: detected capacity change from 0 to 512 [ 111.810133][ T6526] bridge_slave_1: entered promiscuous mode [ 111.845308][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.861788][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.913080][ T6526] team0: Port device team_slave_0 added [ 111.920416][ T6526] team0: Port device team_slave_1 added [ 111.952413][ T50] IPVS: stop unused estimator thread 0... [ 111.963076][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.970178][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.996441][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.009436][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.016442][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.042411][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.054319][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 112.104118][ T6526] hsr_slave_0: entered promiscuous mode [ 112.110309][ T6526] hsr_slave_1: entered promiscuous mode [ 112.117179][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.124748][ T6526] Cannot create hsr debugfs directory [ 112.143220][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.149946][ T6600] loop0: detected capacity change from 0 to 256 [ 112.161991][ T6600] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.174127][ T6600] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.193639][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.200797][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.208197][ T6551] bridge_slave_0: entered allmulticast mode [ 112.214807][ T6551] bridge_slave_0: entered promiscuous mode [ 112.222266][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.229383][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.236906][ T6551] bridge_slave_1: entered allmulticast mode [ 112.243488][ T6551] bridge_slave_1: entered promiscuous mode [ 112.253839][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.293278][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.314933][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.334078][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.418411][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.433484][ T6551] team0: Port device team_slave_0 added [ 112.450032][ T6551] team0: Port device team_slave_1 added [ 112.512012][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.519064][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.545010][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.629985][ T6605] lo speed is unknown, defaulting to 1000 [ 112.636135][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.643190][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.669166][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.695807][ T50] bridge_slave_1: left allmulticast mode [ 112.701993][ T50] bridge_slave_1: left promiscuous mode [ 112.707711][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.715597][ T50] bridge_slave_0: left allmulticast mode [ 112.721477][ T50] bridge_slave_0: left promiscuous mode [ 112.727223][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.738044][ T6607] loop2: detected capacity change from 0 to 512 [ 112.820305][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.832347][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.841126][ T6609] loop4: detected capacity change from 0 to 128 [ 112.850225][ T50] bond0 (unregistering): Released all slaves [ 112.880870][ T6551] hsr_slave_0: entered promiscuous mode [ 112.888998][ T6551] hsr_slave_1: entered promiscuous mode [ 112.895172][ T6551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.903292][ T6551] Cannot create hsr debugfs directory [ 112.959110][ T6526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.977520][ T6526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.003666][ T6526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.012810][ T6526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.020855][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 113.020872][ T29] audit: type=1326 audit(1718143750.630:52765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm=5B5B2D5C8D25BC2B exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 113.053047][ T29] audit: type=1326 audit(1718143750.650:52766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm=5B5B2D5C8D25BC2B exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 113.077452][ T29] audit: type=1326 audit(1718143750.660:52767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm=5B5B2D5C8D25BC2B exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 113.101851][ T29] audit: type=1326 audit(1718143750.660:52768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm=5B5B2D5C8D25BC2B exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 113.133039][ T50] hsr_slave_0: left promiscuous mode [ 113.138971][ T50] hsr_slave_1: left promiscuous mode [ 113.144967][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.152576][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.165403][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.173040][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.182698][ T50] veth1_macvtap: left promiscuous mode [ 113.188234][ T50] veth0_macvtap: left promiscuous mode [ 113.193746][ T50] veth1_vlan: left promiscuous mode [ 113.199092][ T50] veth0_vlan: left promiscuous mode [ 113.238426][ T6623] loop0: detected capacity change from 0 to 512 [ 113.248993][ T6623] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 113.261437][ T6623] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 113.278846][ T6623] EXT4-fs (loop0): 1 truncate cleaned up [ 113.306962][ T29] audit: type=1326 audit(1718143750.920:52769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b4591ea9 code=0x7ffc0000 [ 113.331644][ T29] audit: type=1326 audit(1718143750.930:52770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b4591ea9 code=0x7ffc0000 [ 113.333972][ T50] team0 (unregistering): Port device team_slave_1 removed [ 113.356637][ T29] audit: type=1326 audit(1718143750.930:52771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86b4591ea9 code=0x7ffc0000 [ 113.387790][ T29] audit: type=1400 audit(1718143750.930:52772): avc: denied { read } for pid=6626 comm="syz-executor.2" name="file0" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 113.410891][ T29] audit: type=1326 audit(1718143750.930:52773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b4591ea9 code=0x7ffc0000 [ 113.435975][ T29] audit: type=1326 audit(1718143750.930:52774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b4591ea9 code=0x7ffc0000 [ 113.460914][ T50] team0 (unregistering): Port device team_slave_0 removed [ 113.571441][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.584964][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.597149][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.604292][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.617172][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.624493][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.639827][ T6635] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.776324][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.842754][ T6551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.857318][ T6551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.876936][ T6551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.917842][ T6551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.944843][ T6526] veth0_vlan: entered promiscuous mode [ 113.963841][ T6526] veth1_vlan: entered promiscuous mode [ 114.012252][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.023297][ T6526] veth0_macvtap: entered promiscuous mode [ 114.042687][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.051689][ T6526] veth1_macvtap: entered promiscuous mode [ 114.065194][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.072327][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.082797][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.089898][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.115106][ T6551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.125586][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.186038][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.196666][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.206537][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.217008][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.226938][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.237374][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.247253][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.257794][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.267624][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.278153][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.290232][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.298960][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.309466][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.319448][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.329927][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.339791][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.350356][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.360244][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.370713][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.380684][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.391276][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.403432][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.427455][ T6526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.436176][ T6526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.445108][ T6526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.453926][ T6526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.522849][ T6658] loop2: detected capacity change from 0 to 128 [ 114.530921][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.536796][ T6658] FAT-fs (loop2): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 114.582964][ T6664] loop0: detected capacity change from 0 to 512 [ 114.593498][ T6664] ext2: Unknown parameter 'dont_measure' [ 114.594541][ T6668] loop3: detected capacity change from 0 to 256 [ 114.620812][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.633319][ T6668] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.665445][ T6668] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.671238][ T6551] veth0_vlan: entered promiscuous mode [ 114.692949][ T6551] veth1_vlan: entered promiscuous mode [ 114.743418][ T6551] veth0_macvtap: entered promiscuous mode [ 114.752968][ T6681] loop4: detected capacity change from 0 to 128 [ 114.764688][ T6551] veth1_macvtap: entered promiscuous mode [ 114.785171][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.795685][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.805568][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.816006][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.825869][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.836488][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.846318][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.856902][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.866739][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.877178][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.887014][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.897494][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.913225][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.923160][ T6685] IPVS: stopping backup sync thread 6105 ... [ 114.923875][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.939742][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.949799][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.960349][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.970347][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.980873][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.990801][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.001241][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.011066][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.021633][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.031507][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.041989][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.056114][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.149806][ T6551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.158638][ T6551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.167398][ T6551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.176092][ T6551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.870283][ T6712] loop1: detected capacity change from 0 to 128 [ 116.012205][ T9] IPVS: starting estimator thread 0... [ 116.032389][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.083231][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.106839][ T6723] IPVS: using max 2304 ests per chain, 115200 per kthread [ 116.394051][ T6760] loop4: detected capacity change from 0 to 2048 [ 116.519001][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.789693][ T6802] syz-executor.3[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.789797][ T6802] syz-executor.3[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.050422][ T6844] veth0_vlan: entered allmulticast mode [ 118.951061][ T6851] syzkaller0: entered promiscuous mode [ 118.956642][ T6851] syzkaller0: entered allmulticast mode [ 119.460231][ T6908] syzkaller0: entered promiscuous mode [ 119.465727][ T6908] syzkaller0: entered allmulticast mode [ 120.484095][ T6978] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 121.435933][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.491235][ T7024] loop2: detected capacity change from 0 to 1024 [ 121.508754][ T7024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 121.520975][ T7024] System zones: 0-1, 3-12 [ 121.527545][ T7024] EXT4-fs mount: 11 callbacks suppressed [ 121.527562][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.550833][ T7024] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 121.564575][ T7024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 121.587783][ T7024] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 121.602453][ T7024] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 121.604388][ T7033] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.629423][ T5575] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.503516][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.682829][ T7048] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.704061][ T7048] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.715188][ T7050] batman_adv: batadv1: Adding interface: netdevsim0 [ 122.723194][ T7050] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.768680][ T7050] batman_adv: batadv1: Interface activated: netdevsim0 [ 123.029295][ T7063] xt_CT: No such helper "pptp" [ 123.099338][ T7073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7073 comm=syz-executor.2 [ 123.122943][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 123.122957][ T29] audit: type=1400 audit(1718143760.730:52807): avc: denied { read } for pid=7072 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 123.159000][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.295705][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.342337][ T7056] lo speed is unknown, defaulting to 1000 [ 123.365475][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.482189][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.675969][ T28] bridge_slave_1: left allmulticast mode [ 123.683243][ T28] bridge_slave_1: left promiscuous mode [ 123.690350][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.735371][ T28] bridge_slave_0: left allmulticast mode [ 123.742568][ T28] bridge_slave_0: left promiscuous mode [ 123.749572][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.079361][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.095338][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.115997][ T28] bond0 (unregistering): Released all slaves [ 124.148290][ T7056] chnl_net:caif_netlink_parms(): no params data found [ 124.229258][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.236511][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.246591][ T7056] bridge_slave_0: entered allmulticast mode [ 124.253488][ T7056] bridge_slave_0: entered promiscuous mode [ 124.270548][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.278979][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.286301][ T7056] bridge_slave_1: entered allmulticast mode [ 124.292970][ T7056] bridge_slave_1: entered promiscuous mode [ 124.311190][ T28] hsr_slave_0: left promiscuous mode [ 124.315415][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 124.327697][ T28] hsr_slave_1: left promiscuous mode [ 124.343452][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.351161][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.361873][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.370324][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.385830][ T28] veth1_macvtap: left promiscuous mode [ 124.391450][ T28] veth0_macvtap: left promiscuous mode [ 124.398705][ T28] veth1_vlan: left promiscuous mode [ 124.404142][ T28] veth0_vlan: left promiscuous mode [ 124.511546][ T28] team0 (unregistering): Port device team_slave_1 removed [ 124.523596][ T28] team0 (unregistering): Port device team_slave_0 removed [ 124.574812][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.589993][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.621067][ T7056] team0: Port device team_slave_0 added [ 124.630256][ T7056] team0: Port device team_slave_1 added [ 124.650733][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.657869][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.684188][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.696105][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.703146][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.715256][ T7130] loop1: detected capacity change from 0 to 512 [ 124.729555][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.752575][ T7130] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 124.769226][ T7130] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 124.785812][ T7056] hsr_slave_0: entered promiscuous mode [ 124.789609][ T7130] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.803855][ T7056] hsr_slave_1: entered promiscuous mode [ 124.854927][ T28] IPVS: stop unused estimator thread 0... [ 125.038331][ T7138] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.049327][ T7138] unsupported nlmsg_type 40 [ 125.072224][ T7140] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.101781][ T7056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.108441][ T7142] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 125.123748][ T7142] CPU: 0 PID: 7142 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller #0 [ 125.132460][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 125.142535][ T7142] Call Trace: [ 125.145872][ T7142] [ 125.148858][ T7142] dump_stack_lvl+0xf2/0x150 [ 125.153522][ T7142] dump_stack+0x15/0x20 [ 125.157747][ T7142] warn_alloc+0x145/0x1b0 [ 125.162128][ T7142] ? __schedule+0x5e8/0x940 [ 125.166668][ T7142] ? __vmalloc_node_range_noprof+0x8c/0xef0 [ 125.172639][ T7142] __vmalloc_node_range_noprof+0xac/0xef0 [ 125.178426][ T7142] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.183805][ T7142] ? avc_has_perm_noaudit+0x1cc/0x210 [ 125.189288][ T7142] ? xskq_create+0x36/0xd0 [ 125.193746][ T7142] vmalloc_user_noprof+0x59/0x70 [ 125.198769][ T7142] ? xskq_create+0x79/0xd0 [ 125.203288][ T7142] xskq_create+0x79/0xd0 [ 125.207577][ T7142] xsk_init_queue+0x82/0xd0 [ 125.212110][ T7142] xsk_setsockopt+0x409/0x520 [ 125.216895][ T7142] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.222129][ T7142] __sys_setsockopt+0x1d8/0x250 [ 125.227058][ T7142] __x64_sys_setsockopt+0x66/0x80 [ 125.232140][ T7142] x64_sys_call+0x1183/0x2d70 [ 125.236903][ T7142] do_syscall_64+0xc9/0x1c0 [ 125.241477][ T7142] ? clear_bhb_loop+0x55/0xb0 [ 125.246228][ T7142] ? clear_bhb_loop+0x55/0xb0 [ 125.250975][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.252763][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 125.256955][ T7142] RIP: 0033:0x7f13f5819ea9 [ 125.270433][ T7142] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 125.290075][ T7142] RSP: 002b:00007f13f4b940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.298572][ T7142] RAX: ffffffffffffffda RBX: 00007f13f5950f80 RCX: 00007f13f5819ea9 [ 125.306787][ T7142] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 125.314783][ T7142] RBP: 00007f13f5888ff4 R08: 0000000000000020 R09: 0000000000000000 [ 125.322821][ T7142] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 125.330814][ T7142] R13: 000000000000000b R14: 00007f13f5950f80 R15: 00007ffd54861268 [ 125.338885][ T7142] [ 125.343526][ T7142] Mem-Info: [ 125.346711][ T7142] active_anon:583 inactive_anon:25993 isolated_anon:0 [ 125.346711][ T7142] active_file:5024 inactive_file:11914 isolated_file:0 [ 125.346711][ T7142] unevictable:0 dirty:76 writeback:0 [ 125.346711][ T7142] slab_reclaimable:2925 slab_unreclaimable:17232 [ 125.346711][ T7142] mapped:18732 shmem:9199 pagetables:569 [ 125.346711][ T7142] sec_pagetables:0 bounce:0 [ 125.346711][ T7142] kernel_misc_reclaimable:0 [ 125.346711][ T7142] free:1898047 free_pcp:1294 free_cma:0 [ 125.393118][ T7142] Node 0 active_anon:2332kB inactive_anon:104088kB active_file:20096kB inactive_file:47656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74928kB dirty:304kB writeback:0kB shmem:36796kB writeback_tmp:0kB kernel_stack:3136kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 125.422726][ T7142] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.451128][ T7142] lowmem_reserve[]: 0 2874 7852 0 [ 125.457695][ T7142] Node 0 DMA32 free:2957052kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960688kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:96kB free_cma:0kB [ 125.487661][ T7142] lowmem_reserve[]: 0 0 4978 0 [ 125.492535][ T7142] Node 0 Normal free:4619776kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:2332kB inactive_anon:104088kB active_file:20096kB inactive_file:47656kB unevictable:0kB writepending:304kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:1204kB local_pcp:708kB free_cma:0kB [ 125.524247][ T7142] lowmem_reserve[]: 0 0 0 0 [ 125.530230][ T7142] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.544311][ T7142] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957052kB [ 125.562161][ T7142] Node 0 Normal: 1061*4kB (UME) 798*8kB (UME) 361*16kB (UME) 137*32kB (UME) 88*64kB (UME) 42*128kB (UME) 30*256kB (UME) 34*512kB (UME) 12*1024kB (UME) 6*2048kB (UM) 1108*4096kB (UM) = 4619828kB [ 125.582795][ T7142] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 125.593524][ T7142] 24815 total pagecache pages [ 125.599625][ T7142] 9 pages in swap cache [ 125.603780][ T7142] Free swap = 124476kB [ 125.609359][ T7142] Total swap = 124996kB [ 125.613526][ T7142] 2097051 pages RAM [ 125.618770][ T7142] 0 pages HighMem/MovableOnly [ 125.623554][ T7142] 78487 pages reserved [ 125.641424][ T6551] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 125.668851][ T7056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.698033][ T7056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.722303][ T7056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.817173][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.845742][ T7056] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.872847][ T3184] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.879980][ T3184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.898654][ T3184] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.905809][ T3184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.928948][ T7169] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 125.955343][ T7169] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 125.963546][ T7169] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.103291][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.273516][ T7056] veth0_vlan: entered promiscuous mode [ 126.285943][ T7056] veth1_vlan: entered promiscuous mode [ 126.304441][ T7056] veth0_macvtap: entered promiscuous mode [ 126.312185][ T7056] veth1_macvtap: entered promiscuous mode [ 126.323749][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.334337][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.344291][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.354995][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.364890][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.375389][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.385422][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.395907][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.405800][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.416802][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.426655][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.437206][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.449623][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.461447][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.472330][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.482186][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.492715][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.502583][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.513048][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.523015][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.533704][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.543584][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.554047][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.563907][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.574398][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.586999][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.599400][ T7056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.608198][ T7056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.617080][ T7056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.625910][ T7056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.064971][ T7213] loop3: detected capacity change from 0 to 512 [ 127.105531][ T7213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.149938][ T7213] ext4 filesystem being mounted at /root/syzkaller-testdir2460486824/syzkaller.3dSzyo/36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.251079][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.436017][ T7231] rose0: refused to change device tx_queue_len [ 127.763316][ T7251] loop1: detected capacity change from 0 to 512 [ 127.880823][ T7251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.911515][ T7251] ext4 filesystem being mounted at /root/syzkaller-testdir3364452051/syzkaller.F6wS9a/58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.982308][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.397429][ T7275] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 128.521039][ T7280] loop0: detected capacity change from 0 to 512 [ 128.628050][ T7280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.666896][ T7280] ext4 filesystem being mounted at /root/syzkaller-testdir907430393/syzkaller.yjNRLM/11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.757269][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.840227][ T7303] syzkaller0: entered promiscuous mode [ 128.845744][ T7303] syzkaller0: entered allmulticast mode [ 129.071623][ T29] audit: type=1400 audit(1718143766.680:52808): avc: denied { create } for pid=7318 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.167080][ T7329] loop4: detected capacity change from 0 to 512 [ 129.281910][ T7339] lo speed is unknown, defaulting to 1000 [ 129.321917][ T29] audit: type=1326 audit(1718143766.930:52809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x0 [ 129.456625][ T7359] loop2: detected capacity change from 0 to 2048 [ 129.471691][ T7359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.486217][ T7359] ext4 filesystem being mounted at /root/syzkaller-testdir564367025/syzkaller.Z6PKWR/133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.537080][ T7359] loop2: detected capacity change from 2048 to 64 [ 129.565993][ T29] audit: type=1400 audit(1718143767.170:52810): avc: denied { ioctl } for pid=7358 comm="syz-executor.2" path="/root/syzkaller-testdir564367025/syzkaller.Z6PKWR/133/bus/file0/cpuset.effective_cpus" dev="loop2" ino=19 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.570008][ T7359] syz-executor.2: attempt to access beyond end of device [ 129.570008][ T7359] loop2: rw=2049, sector=1536, nr_sectors = 136 limit=64 [ 129.613746][ T7359] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 192) [ 129.627474][ T7359] Buffer I/O error on device loop2, logical block 192 [ 129.634293][ T7359] Buffer I/O error on device loop2, logical block 193 [ 129.642576][ T7359] Buffer I/O error on device loop2, logical block 194 [ 129.650718][ T7359] Buffer I/O error on device loop2, logical block 195 [ 129.659103][ T7359] Buffer I/O error on device loop2, logical block 196 [ 129.665901][ T7359] Buffer I/O error on device loop2, logical block 197 [ 129.674276][ T7359] Buffer I/O error on device loop2, logical block 198 [ 129.682436][ T7359] Buffer I/O error on device loop2, logical block 199 [ 129.690616][ T7359] Buffer I/O error on device loop2, logical block 200 [ 129.698759][ T7359] Buffer I/O error on device loop2, logical block 201 [ 129.740094][ T5575] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.750518][ T7361] kmmpd-loop2: attempt to access beyond end of device [ 129.750518][ T7361] loop2: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 129.764039][ T7361] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 130.174060][ T7375] loop4: detected capacity change from 0 to 512 [ 130.240699][ T7370] lo speed is unknown, defaulting to 1000 [ 130.309116][ T7384] loop1: detected capacity change from 0 to 164 [ 130.318787][ T7384] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 130.329497][ T7383] pim6reg1: entered promiscuous mode [ 130.334840][ T7383] pim6reg1: entered allmulticast mode [ 130.336970][ T7384] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 130.354297][ T7386] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 130.413163][ T7370] chnl_net:caif_netlink_parms(): no params data found [ 130.478285][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.485424][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.507812][ T7370] bridge_slave_0: entered allmulticast mode [ 130.514460][ T7370] bridge_slave_0: entered promiscuous mode [ 130.522303][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.529440][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.536755][ T7370] bridge_slave_1: entered allmulticast mode [ 130.543354][ T7370] bridge_slave_1: entered promiscuous mode [ 130.568880][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.626974][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.668292][ T7370] team0: Port device team_slave_0 added [ 130.679276][ T7370] team0: Port device team_slave_1 added [ 130.687039][ T7407] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.712878][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.721256][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.733472][ T7412] loop4: detected capacity change from 0 to 1764 [ 130.748584][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.768533][ T7414] loop0: detected capacity change from 0 to 128 [ 130.780714][ T7412] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 130.786846][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.795169][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.822336][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.866751][ T7370] hsr_slave_0: entered promiscuous mode [ 130.873057][ T7370] hsr_slave_1: entered promiscuous mode [ 130.879817][ T7370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.897428][ T7370] Cannot create hsr debugfs directory [ 130.948485][ T7429] loop4: detected capacity change from 0 to 1024 [ 130.993284][ T7370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.054399][ T7370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.124959][ T7370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.142064][ T7442] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 131.180159][ T7429] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 131.198218][ T7370] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 131.212918][ T7370] batman_adv: batadv1: Removing interface: netdevsim0 [ 131.229941][ T7370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.261835][ T7451] loop3: detected capacity change from 0 to 128 [ 131.306167][ T7370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.315364][ T7370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.325915][ T7370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.338220][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.354307][ T7370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.387687][ T7459] loop3: detected capacity change from 0 to 512 [ 131.410869][ T29] audit: type=1400 audit(1718143769.020:52811): avc: denied { ioctl } for pid=7456 comm="syz-executor.4" path="socket:[24040]" dev="sockfs" ino=24040 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.411109][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.448846][ T7459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.454541][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.469446][ T7459] ext4 filesystem being mounted at /root/syzkaller-testdir2460486824/syzkaller.3dSzyo/65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.477671][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.491087][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.529562][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.536671][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.551768][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.583588][ T7471] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 131.622431][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.629829][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.638356][ T7474] bridge0: entered allmulticast mode [ 131.698400][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.707814][ T7474] bridge_slave_1: left allmulticast mode [ 131.713484][ T7474] bridge_slave_1: left promiscuous mode [ 131.720717][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.749980][ T7474] bridge_slave_0: left allmulticast mode [ 131.755659][ T7474] bridge_slave_0: left promiscuous mode [ 131.761554][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.771726][ T29] audit: type=1326 audit(1718143769.380:52812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 131.797337][ T29] audit: type=1326 audit(1718143769.380:52813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 131.797372][ T29] audit: type=1326 audit(1718143769.380:52814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 131.797404][ T29] audit: type=1326 audit(1718143769.380:52815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 131.797491][ T29] audit: type=1326 audit(1718143769.380:52816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 131.797528][ T29] audit: type=1326 audit(1718143769.380:52817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 132.007259][ T7506] loop4: detected capacity change from 0 to 512 [ 132.050433][ T7510] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 132.097993][ T7370] veth0_vlan: entered promiscuous mode [ 132.115495][ T7370] veth1_vlan: entered promiscuous mode [ 132.137598][ T7370] veth0_macvtap: entered promiscuous mode [ 132.145546][ T7370] veth1_macvtap: entered promiscuous mode [ 132.160633][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.171304][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.181439][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.191970][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.202234][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.212758][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.223431][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.234079][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.243967][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.254517][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.264422][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.274962][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.284812][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.295278][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.308395][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.322048][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.332560][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.342693][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.353166][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.363010][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.373503][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.383468][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.394173][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.404051][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.414543][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.424400][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.434887][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.444732][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.455307][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.468714][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.479430][ T7370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.488314][ T7370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.497074][ T7370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.505828][ T7370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.534098][ T7533] loop4: detected capacity change from 0 to 1024 [ 132.547307][ T7533] EXT4-fs: Ignoring removed nobh option [ 132.553204][ T7533] EXT4-fs: Ignoring removed orlov option [ 132.559035][ T7533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.672991][ T7548] loop3: detected capacity change from 0 to 512 [ 132.700755][ T7548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.714116][ T7548] ext4 filesystem being mounted at /root/syzkaller-testdir2460486824/syzkaller.3dSzyo/76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.729918][ T7554] vlan1: entered promiscuous mode [ 132.734984][ T7554] caif0: entered promiscuous mode [ 132.751740][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.761092][ T7554] caif0: left promiscuous mode [ 132.949357][ T7580] loop3: detected capacity change from 0 to 1024 [ 132.957837][ T7580] EXT4-fs: Ignoring removed nobh option [ 132.973006][ T7580] EXT4-fs: Ignoring removed orlov option [ 132.980095][ T7580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.010283][ T7580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.061607][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.125682][ T7598] vlan2: entered promiscuous mode [ 133.131787][ T7598] caif0: entered promiscuous mode [ 133.144581][ T7598] caif0: left promiscuous mode [ 133.183180][ T7600] sg_read: process 188 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. [ 133.309099][ T7614] loop1: detected capacity change from 0 to 512 [ 133.331480][ T7614] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 133.371877][ T7614] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 133.397799][ T7614] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.443858][ T7614] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 133.485258][ T6551] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 133.591956][ T7623] loop1: detected capacity change from 0 to 1024 [ 133.829055][ T7629] loop0: detected capacity change from 0 to 8192 [ 133.838641][ T7629] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.140391][ T7648] xt_policy: too many policy elements [ 134.145334][ T7650] xt_policy: too many policy elements [ 134.199736][ T7656] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 134.211942][ T7647] loop3: detected capacity change from 0 to 2048 [ 135.060974][ T7647] Alternate GPT is invalid, using primary GPT. [ 135.068940][ T7647] loop3: p1 p2 p3 [ 135.101580][ T7658] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 99999999 (only 8 groups) [ 135.269382][ T7681] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.744461][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 135.744476][ T29] audit: type=1400 audit(1718143773.350:53040): avc: denied { read } for pid=7711 comm="syz-executor.4" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 135.777884][ T29] audit: type=1400 audit(1718143773.350:53041): avc: denied { open } for pid=7711 comm="syz-executor.4" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.125942][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.137568][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.153780][ T7722] loop2: detected capacity change from 0 to 512 [ 136.162813][ T7720] nlmon0: entered promiscuous mode [ 136.171979][ T7720] vlan2: entered promiscuous mode [ 136.179788][ T7720] nlmon0: left promiscuous mode [ 136.196081][ T7722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.211714][ T7722] ext4 filesystem being mounted at /root/syzkaller-testdir1397047885/syzkaller.kWRn4n/14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.238153][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.288913][ T9] kernel write not supported for file /vcsu (pid: 9 comm: kworker/0:1) [ 136.296415][ T7735] loop2: detected capacity change from 0 to 512 [ 136.323104][ T7735] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 393: padding at end of block bitmap is not set [ 136.341708][ T7735] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 136.351841][ T7735] EXT4-fs (loop2): 2 truncates cleaned up [ 136.358088][ T7735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.384961][ T29] audit: type=1326 audit(1718143773.990:53042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13f5817627 code=0x7ffc0000 [ 136.413294][ T29] audit: type=1326 audit(1718143774.030:53043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13f57dd2e9 code=0x7ffc0000 [ 136.437556][ T29] audit: type=1326 audit(1718143774.030:53044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f5819ea9 code=0x7ffc0000 [ 136.461804][ T29] audit: type=1326 audit(1718143774.030:53045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13f5817627 code=0x7ffc0000 [ 136.463410][ T7750] 9pnet_fd: Insufficient options for proto=fd [ 136.485843][ T29] audit: type=1326 audit(1718143774.030:53046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13f57dd2e9 code=0x7ffc0000 [ 136.485957][ T29] audit: type=1326 audit(1718143774.030:53047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13f5817627 code=0x7ffc0000 [ 136.485990][ T29] audit: type=1326 audit(1718143774.030:53048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13f57dd2e9 code=0x7ffc0000 [ 136.486093][ T29] audit: type=1326 audit(1718143774.030:53049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13f5817627 code=0x7ffc0000 [ 136.612588][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.623740][ T7756] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.669416][ T7759] loop1: detected capacity change from 0 to 512 [ 136.680731][ T7760] loop4: detected capacity change from 0 to 512 [ 136.694830][ T7759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.731984][ T7759] ext4 filesystem being mounted at /root/syzkaller-testdir3364452051/syzkaller.F6wS9a/87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.841050][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.897726][ T7781] mmap: syz-executor.4 (7781) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.120960][ T7802] loop0: detected capacity change from 0 to 512 [ 137.149496][ T7802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.163545][ T7802] ext4 filesystem being mounted at /root/syzkaller-testdir907430393/syzkaller.yjNRLM/46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.164568][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.192144][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.201741][ T7804] IPVS: stopping backup sync thread 7812 ... [ 137.207700][ T7812] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 137.226443][ T7814] syzkaller0: entered allmulticast mode [ 137.245185][ T7820] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 137.253420][ T7820] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.400628][ T7833] loop2: detected capacity change from 0 to 256 [ 137.411535][ T7833] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.441368][ T7833] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.604473][ T7849] loop4: detected capacity change from 0 to 512 [ 137.640911][ T7852] IPVS: stopping backup sync thread 7854 ... [ 137.650876][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.665123][ T7856] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 137.674559][ T7856] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 137.822793][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.962443][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.174462][ T7783] syzkaller0: left allmulticast mode [ 138.200499][ T7879] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.259749][ T7887] loop0: detected capacity change from 0 to 512 [ 138.288923][ T7891] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 138.300328][ T7888] IPVS: stopping backup sync thread 7891 ... [ 138.309181][ T7887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.331837][ T7887] ext4 filesystem being mounted at /root/syzkaller-testdir907430393/syzkaller.yjNRLM/53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.356712][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.408926][ T7908] loop3: detected capacity change from 0 to 1024 [ 138.419666][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.431830][ T7912] loop4: detected capacity change from 0 to 512 [ 138.438144][ T7910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.438204][ T7910] IPv6: NLM_F_CREATE should be set when creating new route [ 138.438508][ T7910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.438521][ T7910] IPv6: NLM_F_CREATE should be set when creating new route [ 138.438863][ T7910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7910 comm=syz-executor.0 [ 138.439643][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.452086][ T7908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.559864][ T7920] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.668056][ T7931] loop0: detected capacity change from 0 to 512 [ 138.678992][ T7908] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 138.700150][ T7931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.712812][ T7931] ext4 filesystem being mounted at /root/syzkaller-testdir907430393/syzkaller.yjNRLM/56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.739507][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.805739][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.833778][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.923922][ T7956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.931271][ T7956] IPv6: NLM_F_CREATE should be set when creating new route [ 138.939191][ T7956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.946433][ T7956] IPv6: NLM_F_CREATE should be set when creating new route [ 138.954381][ T7956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7956 comm=syz-executor.3 [ 138.987817][ T7947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7947 comm=syz-executor.0 [ 139.083363][ T7965] loop1: detected capacity change from 0 to 512 [ 139.120722][ T7965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.133272][ T7971] loop3: detected capacity change from 0 to 1024 [ 139.139943][ T7965] ext4 filesystem being mounted at /root/syzkaller-testdir3364452051/syzkaller.F6wS9a/91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.165172][ T7971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.188234][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.351157][ T7971] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 139.435979][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.491031][ T7997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.498286][ T7997] IPv6: NLM_F_CREATE should be set when creating new route [ 139.508893][ T7997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.516311][ T7997] IPv6: NLM_F_CREATE should be set when creating new route [ 139.525383][ T7997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7997 comm=syz-executor.0 [ 139.581777][ T8004] loop3: detected capacity change from 0 to 512 [ 139.599610][ T8004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.614102][ T8004] ext4 filesystem being mounted at /root/syzkaller-testdir2460486824/syzkaller.3dSzyo/108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.640846][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.288365][ T8022] loop1: detected capacity change from 0 to 2048 [ 140.301233][ T8028] loop2: detected capacity change from 0 to 1024 [ 140.309672][ T8028] EXT4-fs: Ignoring removed nobh option [ 140.315375][ T8028] EXT4-fs: Ignoring removed orlov option [ 140.321123][ T8028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.322924][ T8022] Alternate GPT is invalid, using primary GPT. [ 140.335496][ T8022] loop1: p1 p2 p3 [ 140.338495][ T8028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.367806][ T8022] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 99999999 (only 8 groups) [ 140.368894][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.515552][ T8041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8041 comm=syz-executor.2 [ 140.561293][ T8045] loop0: detected capacity change from 0 to 128 [ 140.570233][ T8043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.577522][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 140.584645][ T8045] FAT-fs (loop0): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 140.587965][ T8043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.602824][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 140.612538][ T8043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8043 comm=syz-executor.1 [ 140.733835][ T8054] IPVS: Error joining to the multicast group [ 140.800908][ T29] kauditd_printk_skb: 3208 callbacks suppressed [ 140.800928][ T29] audit: type=1326 audit(1718143778.410:56258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.831516][ T29] audit: type=1326 audit(1718143778.410:56259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.831555][ T29] audit: type=1326 audit(1718143778.410:56260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.831622][ T29] audit: type=1326 audit(1718143778.410:56261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.831700][ T29] audit: type=1326 audit(1718143778.410:56262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.831810][ T29] audit: type=1326 audit(1718143778.410:56263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.831892][ T29] audit: type=1326 audit(1718143778.410:56264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.844921][ T29] audit: type=1326 audit(1718143778.410:56265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.933409][ T8064] loop0: detected capacity change from 0 to 1024 [ 140.954071][ T29] audit: type=1326 audit(1718143778.410:56266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.954114][ T29] audit: type=1326 audit(1718143778.410:56267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c4e4b6ea9 code=0x7ffc0000 [ 140.962265][ T8066] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.062846][ T8064] EXT4-fs: Ignoring removed nobh option [ 141.073729][ T8064] EXT4-fs: Ignoring removed orlov option [ 141.081109][ T8064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.109350][ T8059] loop2: detected capacity change from 0 to 2048 [ 141.109726][ T8064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.147761][ T8059] Alternate GPT is invalid, using primary GPT. [ 141.154241][ T8059] loop2: p1 p2 p3 [ 141.178675][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.240948][ T8078] loop2: detected capacity change from 0 to 128 [ 141.251797][ T8078] FAT-fs (loop2): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 141.273096][ T8081] loop3: detected capacity change from 0 to 2048 [ 141.288323][ T8081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.303846][ T8081] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz-executor.3: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 141.334696][ T8081] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz-executor.3: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 141.360484][ T8081] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz-executor.3: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 141.396906][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.451204][ T8095] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.521789][ T8103] loop3: detected capacity change from 0 to 1024 [ 141.539865][ T8105] loop2: detected capacity change from 0 to 8192 [ 141.542026][ T8106] loop0: detected capacity change from 0 to 1024 [ 141.556071][ T8106] EXT4-fs: Ignoring removed nobh option [ 141.564995][ T8106] EXT4-fs: Ignoring removed orlov option [ 141.572168][ T8106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.584006][ T8103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.592026][ T8113] loop4: detected capacity change from 0 to 256 [ 141.600421][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.733525][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.759413][ T8103] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 141.771371][ T8119] loop2: detected capacity change from 0 to 128 [ 141.779009][ T8119] FAT-fs (loop2): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 142.043286][ T8121] loop0: detected capacity change from 0 to 8192 [ 142.091367][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.214028][ T8128] loop2: detected capacity change from 0 to 128 [ 142.286973][ T8134] __nla_validate_parse: 13 callbacks suppressed [ 142.286990][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.324540][ T8140] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 142.412941][ T8154] xt_HMARK: proto mask must be zero with L3 mode [ 142.492240][ T8146] loop0: detected capacity change from 0 to 8192 [ 142.498900][ T8158] syzkaller0: entered allmulticast mode [ 142.511471][ T8146] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.516957][ T8150] nlmon0: entered promiscuous mode [ 142.524122][ T8146] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 142.529602][ T8150] vlan2: entered promiscuous mode [ 142.538651][ T8146] FAT-fs (loop0): Filesystem has been set read-only [ 142.548993][ T8150] nlmon0: left promiscuous mode [ 142.565575][ T8146] ebt_among: src integrity fail: 300 [ 142.586084][ T8157] syzkaller0: left allmulticast mode [ 142.651514][ T8165] loop4: detected capacity change from 0 to 2048 [ 142.669406][ T8175] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 142.681707][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.701777][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.705354][ T8165] Alternate GPT is invalid, using primary GPT. [ 142.718436][ T8165] loop4: p1 p2 p3 [ 142.744970][ T8181] loop1: detected capacity change from 0 to 512 [ 142.768529][ T8181] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 393: padding at end of block bitmap is not set [ 142.794782][ T8181] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 142.818854][ T8181] EXT4-fs (loop1): 2 truncates cleaned up [ 142.825356][ T8181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.960912][ T8204] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 142.990245][ T8205] nlmon0: entered promiscuous mode [ 143.001278][ T8205] vlan2: entered promiscuous mode [ 143.018751][ T8205] nlmon0: left promiscuous mode [ 143.029373][ T8179] Invalid ELF header magic: != ELF [ 143.070269][ T8212] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.143005][ T8214] loop4: detected capacity change from 0 to 2048 [ 143.209232][ T8214] Alternate GPT is invalid, using primary GPT. [ 143.215629][ T8214] loop4: p1 p2 p3 [ 143.273859][ T8227] loop0: detected capacity change from 0 to 1024 [ 143.330320][ T8227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.477352][ T8241] vlan2: entered promiscuous mode [ 143.482443][ T8241] caif0: entered promiscuous mode [ 143.499738][ T8244] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.515890][ T8241] caif0: left promiscuous mode [ 143.543518][ T8245] nlmon0: entered promiscuous mode [ 143.556046][ T8245] vlan1: entered promiscuous mode [ 143.571589][ T8245] nlmon0: left promiscuous mode [ 143.623373][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.703225][ T8227] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 143.746039][ T8255] loop3: detected capacity change from 0 to 2048 [ 143.807734][ T8255] Alternate GPT is invalid, using primary GPT. [ 143.814061][ T8255] loop3: p1 p2 p3 [ 143.843677][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.851940][ T8261] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.920598][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.935622][ T8280] loop2: detected capacity change from 0 to 512 [ 143.950083][ T8280] EXT4-fs: Ignoring removed orlov option [ 143.958475][ T8280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.963243][ T8278] nlmon0: entered promiscuous mode [ 143.972535][ T8281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=8281 comm=syz-executor.3 [ 143.979740][ T8278] vlan2: entered promiscuous mode [ 143.992581][ T8280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.001526][ T8278] nlmon0: left promiscuous mode [ 144.020631][ T8280] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 144.028688][ T8280] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 144.037677][ T8280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.041873][ T8289] loop3: detected capacity change from 0 to 512 [ 144.044110][ T8280] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.065134][ T8280] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 144.074244][ T8280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 40: padding at end of block bitmap is not set [ 144.089498][ T8280] EXT4-fs (loop2): Remounting filesystem read-only [ 144.096145][ T8280] EXT4-fs (loop2): 1 truncate cleaned up [ 144.102325][ T8280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.114788][ T8280] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 144.121830][ T8280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.139397][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.162087][ T8289] ext4 filesystem being mounted at /root/syzkaller-testdir2460486824/syzkaller.3dSzyo/134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.171290][ T8280] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.193553][ T8299] loop4: detected capacity change from 0 to 256 [ 144.204899][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.209870][ T8298] loop0: detected capacity change from 0 to 1024 [ 144.229363][ T8298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.377736][ T11] bridge_slave_1: left allmulticast mode [ 144.383442][ T11] bridge_slave_1: left promiscuous mode [ 144.390614][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.510335][ T11] bridge_slave_0: left allmulticast mode [ 144.516030][ T11] bridge_slave_0: left promiscuous mode [ 144.521746][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.613186][ T8315] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.850245][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.861123][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.872695][ T11] bond0 (unregistering): Released all slaves [ 144.883942][ T8298] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 144.901128][ T8326] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 144.901158][ T8323] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.910387][ T8324] IPVS: stopping backup sync thread 8326 ... [ 144.925795][ T8323] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.964337][ T8328] nlmon0: entered promiscuous mode [ 144.970015][ T8328] vlan2: entered promiscuous mode [ 144.977602][ T8328] nlmon0: left promiscuous mode [ 145.023432][ T7056] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.060827][ T11] hsr_slave_0: left promiscuous mode [ 145.067906][ T11] hsr_slave_1: left promiscuous mode [ 145.074596][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.082114][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.091875][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.099710][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.111432][ T8332] loop4: detected capacity change from 0 to 512 [ 145.137820][ T11] veth1_macvtap: left promiscuous mode [ 145.143351][ T11] veth0_macvtap: left promiscuous mode [ 145.149059][ T11] veth1_vlan: left promiscuous mode [ 145.154552][ T11] veth0_vlan: left promiscuous mode [ 145.263527][ T8351] loop2: detected capacity change from 0 to 512 [ 145.273096][ T8351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.284363][ T8351] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 145.319753][ T11] team0 (unregistering): Port device team_slave_1 removed [ 145.330133][ T11] team0 (unregistering): Port device team_slave_0 removed [ 145.392038][ T8357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8357 comm=syz-executor.0 [ 145.397030][ T8353] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 145.430456][ T8354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.437867][ T8354] IPv6: NLM_F_CREATE should be set when creating new route [ 145.454659][ T8362] loop3: detected capacity change from 0 to 256 [ 145.455065][ T8355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.464316][ T8362] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.468174][ T8355] IPv6: NLM_F_CREATE should be set when creating new route [ 145.491865][ T8362] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.765985][ T8378] nlmon0: entered promiscuous mode [ 145.782165][ T8378] vlan2: entered promiscuous mode [ 145.795046][ T8378] nlmon0: left promiscuous mode [ 146.110132][ T29] kauditd_printk_skb: 2996 callbacks suppressed [ 146.110149][ T29] audit: type=1326 audit(1718143783.720:59263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.143619][ T29] audit: type=1326 audit(1718143783.720:59264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.167865][ T29] audit: type=1326 audit(1718143783.720:59265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.192254][ T29] audit: type=1326 audit(1718143783.720:59266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.216678][ T29] audit: type=1326 audit(1718143783.720:59267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.240865][ T29] audit: type=1326 audit(1718143783.720:59268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.249241][ T8403] loop0: detected capacity change from 0 to 512 [ 146.264933][ T29] audit: type=1326 audit(1718143783.720:59269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.264978][ T29] audit: type=1326 audit(1718143783.720:59270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.265040][ T29] audit: type=1326 audit(1718143783.720:59271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.265092][ T29] audit: type=1326 audit(1718143783.730:59272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 146.379579][ T8403] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 146.395805][ T8403] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 146.428385][ T8403] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.482262][ T8412] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.496127][ T7056] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 146.500816][ T8412] loop4: detected capacity change from 0 to 1024 [ 146.590903][ T8419] loop3: detected capacity change from 0 to 256 [ 146.695288][ T8438] loop0: detected capacity change from 0 to 256 [ 146.702252][ T8436] loop1: detected capacity change from 0 to 256 [ 146.704653][ T8438] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.722764][ T8438] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.729688][ T8435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.740559][ T8435] IPv6: NLM_F_CREATE should be set when creating new route [ 146.750341][ T8436] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.764452][ T8435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.771707][ T8435] IPv6: NLM_F_CREATE should be set when creating new route [ 146.803453][ T8441] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.816265][ T8441] loop4: detected capacity change from 0 to 512 [ 146.829041][ T8436] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.409517][ T8447] loop2: detected capacity change from 0 to 1024 [ 147.457175][ T8447] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.485592][ T8452] loop3: detected capacity change from 0 to 1024 [ 147.495569][ T8452] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.672091][ T8447] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0 [ 147.687889][ T8452] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 147.702079][ T8447] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 0 [ 147.715487][ T8452] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 0 [ 147.728732][ T8447] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.743912][ T8452] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.759986][ T8447] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0 [ 147.765972][ T8452] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 147.774288][ T8447] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 147.774449][ T8447] EXT4-fs (loop2): 1 orphan inode deleted [ 147.789442][ T8452] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 147.796534][ T8447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.804435][ T28] EXT4-fs error (device loop2): ext4_release_dquot:6883: comm kworker/u8:1: Failed to release dquot type 0 [ 147.819165][ T8452] EXT4-fs (loop3): 1 orphan inode deleted [ 147.842106][ T28] EXT4-fs error (device loop3): ext4_release_dquot:6883: comm kworker/u8:1: Failed to release dquot type 0 [ 147.852756][ T8452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.918615][ T8467] loop0: detected capacity change from 0 to 128 [ 147.926420][ T8467] FAT-fs (loop0): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 148.043718][ T8477] __nla_validate_parse: 5 callbacks suppressed [ 148.043732][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.070510][ T8477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.077782][ T8477] IPv6: NLM_F_CREATE should be set when creating new route [ 148.085385][ T8477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.092651][ T8477] IPv6: NLM_F_CREATE should be set when creating new route [ 148.101825][ T8483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8483 comm=syz-executor.0 [ 148.112011][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.153280][ T8488] nlmon0: entered promiscuous mode [ 148.158882][ T8488] vlan2: entered promiscuous mode [ 148.165938][ T8488] nlmon0: left promiscuous mode [ 148.280477][ T8497] loop1: detected capacity change from 0 to 164 [ 148.300317][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.354474][ T8503] loop2: detected capacity change from 0 to 128 [ 148.368910][ T8507] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.380670][ T8503] FAT-fs (loop2): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 148.482421][ T8513] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.504615][ T8513] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.561352][ T8519] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.588850][ T8519] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 148.599429][ T8521] nlmon0: entered promiscuous mode [ 148.606908][ T8521] vlan2: entered promiscuous mode [ 148.613274][ T8521] nlmon0: left promiscuous mode [ 148.950279][ T8538] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 148.960734][ T8536] IPVS: stopping backup sync thread 8538 ... [ 148.989776][ T8540] loop2: detected capacity change from 0 to 128 [ 149.010349][ T8540] FAT-fs (loop2): Unrecognized mount option "blkio.bfq.io_service_time_recursive" or missing value [ 149.104832][ T8552] loop2: detected capacity change from 0 to 512 [ 149.127250][ T8552] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 393: padding at end of block bitmap is not set [ 149.142593][ T8552] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 149.151871][ T8552] EXT4-fs (loop2): 2 truncates cleaned up [ 149.263636][ T8565] loop1: detected capacity change from 0 to 512 [ 149.304005][ T8565] EXT4-fs: Ignoring removed orlov option [ 149.333048][ T8565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.359038][ T8565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.370443][ T8565] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 149.378430][ T8565] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 149.387411][ T8565] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.394003][ T8565] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 149.408652][ T8565] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 149.423401][ T8565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 149.445900][ T8565] EXT4-fs (loop1): Remounting filesystem read-only [ 149.457042][ T8565] EXT4-fs (loop1): 1 truncate cleaned up [ 149.464278][ T8565] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 149.493050][ T8582] loop3: detected capacity change from 0 to 512 [ 149.519141][ T8565] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.541023][ T8582] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 149.567553][ T8582] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 149.662561][ T8582] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 149.718205][ T8582] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.141480][ T8614] syzkaller0: entered allmulticast mode [ 150.160890][ T8612] syzkaller0: left allmulticast mode [ 150.169228][ T8617] loop4: detected capacity change from 0 to 512 [ 150.195859][ T8617] EXT4-fs: Ignoring removed orlov option [ 150.208889][ T8621] loop3: detected capacity change from 0 to 512 [ 150.219318][ T8617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.227700][ T8621] EXT4-fs: user quota file already specified [ 150.237945][ T8619] nlmon0: entered promiscuous mode [ 150.243189][ T8619] vlan2: entered promiscuous mode [ 150.250817][ T8619] nlmon0: left promiscuous mode [ 150.280375][ T8617] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.309723][ T8621] syzkaller0: entered promiscuous mode [ 150.315246][ T8621] syzkaller0: entered allmulticast mode [ 150.416043][ T8629] loop0: detected capacity change from 0 to 1024 [ 150.553847][ T8641] loop4: detected capacity change from 0 to 1024 [ 150.628286][ T8645] nlmon0: entered promiscuous mode [ 150.637748][ T8645] vlan1: entered promiscuous mode [ 150.649592][ T8645] nlmon0: left promiscuous mode [ 150.666866][ T8647] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 150.674996][ T8647] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 150.684701][ T8643] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 150.710348][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.865301][ T8657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.872603][ T8657] IPv6: NLM_F_CREATE should be set when creating new route [ 150.908903][ T8657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.916151][ T8657] IPv6: NLM_F_CREATE should be set when creating new route [ 150.984667][ T8664] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 150.992902][ T8664] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 151.051355][ T8667] loop0: detected capacity change from 0 to 128 [ 151.232946][ T8681] loop4: detected capacity change from 0 to 256 [ 151.304533][ T8681] loop4: detected capacity change from 0 to 512 [ 151.320266][ T8681] ext4: Unknown parameter 'smackfsroot' [ 151.462700][ T8686] loop4: detected capacity change from 0 to 2048 [ 151.473838][ T8686] ext4: Unknown parameter 'fsmagic' [ 151.492845][ T8692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.500180][ T8692] IPv6: NLM_F_CREATE should be set when creating new route [ 151.508369][ T29] kauditd_printk_skb: 4248 callbacks suppressed [ 151.508384][ T29] audit: type=1400 audit(1718143789.120:63514): avc: denied { map } for pid=8687 comm="syz-executor.3" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 151.512729][ T8688] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 151.551001][ T8692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.558261][ T8692] IPv6: NLM_F_CREATE should be set when creating new route [ 151.568820][ T8692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8692 comm=syz-executor.2 [ 151.636150][ T8698] siw: device registration error -23 [ 151.772737][ T8713] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 151.787441][ T8713] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.797737][ T8713] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.807934][ T8713] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.818168][ T8713] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.829091][ T8713] vxlan0: entered promiscuous mode [ 151.852346][ T8714] IPVS: stopping backup sync thread 8718 ... [ 152.035550][ T29] audit: type=1400 audit(1718143789.640:63515): avc: denied { create } for pid=8727 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.159487][ T8734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.166742][ T8734] IPv6: NLM_F_CREATE should be set when creating new route [ 152.197282][ T8734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.204521][ T8734] IPv6: NLM_F_CREATE should be set when creating new route [ 152.239196][ T8734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8734 comm=syz-executor.0 [ 152.452472][ T8752] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 152.469007][ T8749] IPVS: stopping backup sync thread 8752 ... [ 152.561273][ T29] audit: type=1400 audit(1718143790.170:63516): avc: denied { mounton } for pid=8753 comm="syz-executor.3" path="/root/syzkaller-testdir2460486824/syzkaller.3dSzyo/174/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 152.651349][ T8754] tmpfs: Bad value for 'mpol' [ 152.750410][ T8762] loop1: detected capacity change from 0 to 512 [ 152.758110][ T8762] EXT4-fs: Ignoring removed orlov option [ 152.763950][ T8762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.778896][ T8762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.809948][ T8762] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 152.819165][ T8762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 152.831051][ T8762] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.840179][ T8762] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 152.852881][ T8762] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 152.867593][ T8762] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 152.880372][ T8762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 152.896036][ T8762] EXT4-fs (loop1): Remounting filesystem read-only [ 152.902724][ T8762] EXT4-fs (loop1): 1 truncate cleaned up [ 152.908969][ T8762] EXT4-fs mount: 10 callbacks suppressed [ 152.908981][ T8762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.916291][ T8774] loop3: detected capacity change from 0 to 512 [ 152.927255][ T8762] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 152.927663][ T8762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.954171][ T8774] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 153.065534][ T8785] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 153.065627][ T8780] IPVS: stopping backup sync thread 8785 ... [ 153.201686][ T29] audit: type=1326 audit(1718143790.800:63517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4e4b6ea9 code=0x0 [ 153.318903][ T8801] __nla_validate_parse: 11 callbacks suppressed [ 153.318921][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.338937][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.378936][ T8803] loop3: detected capacity change from 0 to 512 [ 153.389612][ T8803] EXT4-fs: Ignoring removed orlov option [ 153.395438][ T8803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.405020][ T8803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.418659][ T8803] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 153.426639][ T8803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 153.435639][ T8803] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.442595][ T8803] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 153.453033][ T8803] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 153.467756][ T8803] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 153.476370][ T8803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 153.493263][ T8803] EXT4-fs (loop3): Remounting filesystem read-only [ 153.499916][ T8803] EXT4-fs (loop3): 1 truncate cleaned up [ 153.506085][ T8803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.520381][ T8803] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 153.527188][ T8803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.580110][ T8803] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.665824][ T8818] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 153.675575][ T8816] IPVS: stopping backup sync thread 8818 ... [ 153.841847][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.852800][ T8829] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.897098][ T29] audit: type=1400 audit(1718143791.500:63518): avc: denied { ioctl } for pid=8831 comm="syz-executor.2" path="socket:[28542]" dev="sockfs" ino=28542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.929935][ T29] audit: type=1326 audit(1718143791.530:63519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a08e93ea9 code=0x0 [ 154.052432][ T8841] loop0: detected capacity change from 0 to 512 [ 154.061812][ T8841] EXT4-fs: Ignoring removed orlov option [ 154.069160][ T8841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.077696][ T8841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.097231][ T8841] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 154.101229][ T8845] loop1: detected capacity change from 0 to 2048 [ 154.105165][ T8841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 154.115746][ T8845] EXT4-fs: Ignoring removed bh option [ 154.119991][ T8841] EXT4-fs (loop0): orphan cleanup on readonly fs [ 154.120028][ T8841] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 154.120057][ T8841] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 154.120086][ T8841] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 154.120392][ T8841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 154.120547][ T8841] EXT4-fs (loop0): Remounting filesystem read-only [ 154.120575][ T8841] EXT4-fs (loop0): 1 truncate cleaned up [ 154.121102][ T8841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.127859][ T8845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.134811][ T8841] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 154.142360][ T8845] EXT4-fs: Ignoring removed nobh option [ 154.159477][ T8841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.199400][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.251289][ T8845] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.282556][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.292563][ T8841] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.435163][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.802976][ T29] audit: type=1326 audit(1718143792.410:63520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a08e93ea9 code=0x0 [ 154.864537][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.921150][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.930684][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.948750][ T8896] geneve2: entered allmulticast mode [ 155.274488][ T8914] nlmon0: entered promiscuous mode [ 155.280394][ T8914] vlan2: entered promiscuous mode [ 155.288554][ T8914] nlmon0: left promiscuous mode [ 155.462579][ T8921] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 155.465768][ T8929] loop3: detected capacity change from 0 to 1024 [ 155.489364][ T8929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.674469][ T8950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.681756][ T8950] IPv6: NLM_F_CREATE should be set when creating new route [ 155.702032][ T8950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8950 comm=syz-executor.2 [ 155.814584][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.961044][ T8964] loop3: detected capacity change from 0 to 256 [ 155.973538][ T8964] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.994029][ T8964] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.966186][ C1] sched: RT throttling activated [ 157.218744][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 157.218834][ T29] audit: type=1326 audit(1718143794.830:63570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.238309][ T8976] loop1: detected capacity change from 0 to 1024 [ 157.263221][ T29] audit: type=1326 audit(1718143794.830:63571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263345][ T29] audit: type=1326 audit(1718143794.830:63572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263380][ T29] audit: type=1326 audit(1718143794.830:63573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263413][ T29] audit: type=1326 audit(1718143794.830:63574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263522][ T29] audit: type=1326 audit(1718143794.830:63575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263554][ T29] audit: type=1326 audit(1718143794.830:63576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263595][ T29] audit: type=1326 audit(1718143794.830:63577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263623][ T29] audit: type=1326 audit(1718143794.830:63578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.263692][ T29] audit: type=1326 audit(1718143794.830:63579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8972 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a456bbea9 code=0x7ffc0000 [ 157.292976][ T8976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.443994][ T8985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.444012][ T8985] IPv6: NLM_F_CREATE should be set when creating new route [ 157.446065][ T8985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8985 comm=syz-executor.3 [ 157.565096][ T8976] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 157.656506][ T8988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.675184][ T8988] IPv6: NLM_F_CREATE should be set when creating new route [ 157.687653][ T8987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8987 comm=syz-executor.0 [ 157.735205][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.912557][ T9007] loop1: detected capacity change from 0 to 256 [ 157.921831][ T9007] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.936042][ T9007] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.422377][ T9016] loop2: detected capacity change from 0 to 512 [ 158.456793][ T9016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.489675][ T9016] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 0 [ 158.515280][ T9016] EXT4-fs (loop2): 1 truncate cleaned up [ 158.522813][ T9016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.549318][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.631236][ T9021] nlmon0: entered promiscuous mode [ 158.638065][ T9021] vlan2: entered promiscuous mode [ 158.644881][ T9021] nlmon0: left promiscuous mode [ 158.696179][ T9026] __nla_validate_parse: 8 callbacks suppressed [ 158.696196][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.879301][ T9030] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 158.960427][ T9042] loop2: detected capacity change from 0 to 2048 [ 159.011523][ T9042] Alternate GPT is invalid, using primary GPT. [ 159.019519][ T9042] loop2: p1 p2 p3 [ 159.484731][ T9061] nlmon0: entered promiscuous mode [ 159.491460][ T9061] vlan2: entered promiscuous mode [ 159.499290][ T9061] nlmon0: left promiscuous mode [ 159.739676][ T9071] loop3: detected capacity change from 0 to 128 [ 159.749095][ T9071] FAT-fs (loop3): bogus number of FAT sectors [ 159.755208][ T9071] FAT-fs (loop3): Can't find a valid FAT filesystem [ 159.845374][ T9078] loop3: detected capacity change from 0 to 512 [ 159.858200][ T9078] EXT4-fs: Ignoring removed nobh option [ 159.880735][ T9078] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 159.898820][ T9078] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 159.928337][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.950019][ T9078] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 159.967815][ T9087] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.989759][ T9078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.013604][ T9078] ext4: Unknown parameter '[jōk#}w:P[uH4<_&VnR[' [ 160.585205][ T6526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.643342][ T9102] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.741662][ T9109] loop3: detected capacity change from 0 to 2048 [ 160.787405][ T9109] Alternate GPT is invalid, using primary GPT. [ 160.793660][ T9109] loop3: p1 p2 p3 [ 160.808100][ T9104] SELinux: Context is not valid (left unmapped). [ 160.887816][ T9118] nlmon0: entered promiscuous mode [ 160.893021][ T9118] vlan2: entered promiscuous mode [ 160.899976][ T9118] nlmon0: left promiscuous mode [ 160.915393][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.926392][ T9120] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.014161][ T9122] all: renamed from lo (while UP) [ 161.078371][ T9130] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.137413][ T9135] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.695655][ T50] ================================================================== [ 161.696405][ T9143] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 161.703794][ T50] BUG: KCSAN: data-race in __dev_change_flags / is_upper_ndev_bond_master_filter [ 161.719631][ T50] [ 161.721982][ T50] read-write to 0xffff88811ec750b0 of 4 bytes by task 9143 on cpu 0: [ 161.730056][ T50] __dev_change_flags+0x9a/0x410 [ 161.735004][ T50] rtnl_newlink+0x121e/0x1690 [ 161.739700][ T50] rtnetlink_rcv_msg+0x85e/0x910 [ 161.744655][ T50] netlink_rcv_skb+0x12c/0x230 [ 161.749456][ T50] rtnetlink_rcv+0x1c/0x30 [ 161.753899][ T50] netlink_unicast+0x58d/0x660 [ 161.758691][ T50] netlink_sendmsg+0x5ca/0x6e0 [ 161.763465][ T50] __sock_sendmsg+0x140/0x180 [ 161.768163][ T50] ____sys_sendmsg+0x312/0x410 [ 161.772954][ T50] __sys_sendmsg+0x1e9/0x280 [ 161.777574][ T50] __x64_sys_sendmsg+0x46/0x50 [ 161.782367][ T50] x64_sys_call+0xb25/0x2d70 [ 161.786980][ T50] do_syscall_64+0xc9/0x1c0 [ 161.791498][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.797419][ T50] [ 161.799750][ T50] read to 0xffff88811ec750b0 of 4 bytes by task 50 on cpu 1: [ 161.807124][ T50] is_upper_ndev_bond_master_filter+0x2b/0xb0 [ 161.813208][ T50] ib_enum_roce_netdev+0x124/0x1d0 [ 161.818353][ T50] ib_enum_all_roce_netdevs+0x8a/0x100 [ 161.823831][ T50] netdevice_event_work_handler+0x67/0x3c0 [ 161.829665][ T50] process_scheduled_works+0x483/0x9a0 [ 161.835141][ T50] worker_thread+0x526/0x730 [ 161.839760][ T50] kthread+0x1d1/0x210 [ 161.843863][ T50] ret_from_fork+0x4b/0x60 [ 161.848385][ T50] ret_from_fork_asm+0x1a/0x30 [ 161.853176][ T50] [ 161.855503][ T50] value changed: 0x00001002 -> 0x00008002 [ 161.861260][ T50] [ 161.863587][ T50] Reported by Kernel Concurrency Sanitizer on: [ 161.869740][ T50] CPU: 1 PID: 50 Comm: kworker/u8:3 Not tainted 6.10.0-rc3-syzkaller #0 [ 161.878096][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 161.888180][ T50] Workqueue: gid-cache-wq netdevice_event_work_handler 2024/06/11 22:09:59 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 161.895060][ T50] ==================================================================