last executing test programs: 4.456176504s ago: executing program 2 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f626174616476002000038018000380140001800500020000000000080001800200000004"], 0x4c}}, 0x0) 4.429781116s ago: executing program 2 (id=1333): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_pktinfo(r1, 0x0, 0xc, &(0x7f0000000080)={0x0, @remote, @multicast1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080024bd7000ffdbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31102e30000000000f00a8007365636f6e646e616d6500000800030002000000080003000000000008000300020000003fe58a04cc3ec62534"], 0x78}, 0x1, 0x0, 0x0, 0x4c804}, 0xc0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x3) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xfd}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fd}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8]}, &(0x7f0000000280)=0x78) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xae, &(0x7f0000000300)=""/174, 0x41100, 0xc, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0xfffffffe, 0x3, 0xa0, 0x35}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[{0x5, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x0, 0x9}, {0x1, 0x5, 0xd, 0x9}, {0x4, 0x4, 0x3, 0xc}, {0x2, 0x2, 0x5, 0x8}, {0x5, 0x4, 0xb, 0x4}], 0x10, 0x5}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005400), &(0x7f0000005440)=0xc) sendmmsg$unix(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000012c0)="59ef", 0x2}, {&(0x7f0000001340)}], 0x2, 0x0, 0x0, 0x40800}}], 0x2, 0x0) 4.38775737s ago: executing program 2 (id=1336): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000940)={0x2d520, 0x0, 0x0, 0xd, 0x0, "0012412d08d500001e200021077b0a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x1c8, 0x0, 0xa, 0x9a000000, 0xf0, 0x0, 0x188, 0x1f0, 0x1f0, 0x188, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f0070687930000000000c0005000000000000000000200001"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x15, 0x5, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 4.364175731s ago: executing program 2 (id=1337): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000880)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.223975013s ago: executing program 2 (id=1339): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x20, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x240088a4) sendmmsg$sock(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)=@generic={0x0, "6fc4dd320a83bdae872ff904967d3687a83dc9972351b729ff841bfea9c4f474790fcb1f11bd84a2f7ad59f46f21eae2ebde9a19d72bc3f65c64676d4e3018e7aa644adf16d5c6d8cb0d20420aae7f9e9e4573a7b72898f9c28ab7fdd652411669a320f6953e45511bdfc8c0c7900c9e6a5ea89b9e75c7d1cc42f06e641f"}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.925147478s ago: executing program 1 (id=1354): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e645d1377f5f3ca1b267498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000740)="b01bdc442c79626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c49", 0x23}, {&(0x7f0000000780)="9bf4187f38b4f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="14e9eb2b4328892813f7a65cbad23a6a1484efeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a547aa903342772221fcb36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e466652b2e60d66b39ed8f5c", 0x8a}, {&(0x7f0000000940)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b84cebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358c1cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e", 0x58}, {&(0x7f00000009c0)="fd8af5e10c88a4544d81f9175dc1f0cddcd9501d8e0157b3fa05e888c2015ee5087ba1f4e9453adb7113f76f8aab87999da78bc4ff2637b6eb5110a460f52a631926f7d44be900e725411402ee71a20057642c6a61c07425483391521405a242af2671f5cc30c2a70d88a7b36d8425ad54b5adb03b43894dd70a61b3ad234193b78f629fa4746b89448ad8da47aee1d5733cb46ffa004b1af613612fb5608bcd01ab90f8d1c6c2761b0de2dfe2b1f23e9125603e543d08d64fd1b7a3d96f7b53a476ac2055c109f5d38b8267cd88a358ebc833139bfe5512233959f4321338649c23", 0xe2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="e726305e41d163b72c8b089344a057aa42a9c154e1090843a1958bf26669fa", 0x1f}], 0x1}}], 0x4, 0x24048844) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMPNS(r0, 0x80108907, 0x0) 3.864231913s ago: executing program 1 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.845408184s ago: executing program 1 (id=1358): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000200)=0x90) 3.822541036s ago: executing program 1 (id=1359): r0 = syz_io_uring_setup(0x723a, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x9f7, 0x0, 0x0, 0x0, 0x0) 3.781177069s ago: executing program 1 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8940, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e00000000001800000000000000000000000000000095000000aa4c913f"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000633c77fbac141416ac14141644029ffe4d2f87e5890c6aab845013f2325f1a39010703038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3.366367183s ago: executing program 2 (id=1370): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x18, r1, 0x0, 0x20000000000000) 2.869548934s ago: executing program 1 (id=1385): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4210, r1, 0x0, 0x0) 2.44167214s ago: executing program 0 (id=1395): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, &(0x7f0000000040)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2.424987961s ago: executing program 0 (id=1397): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.411356742s ago: executing program 0 (id=1399): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 2.354078947s ago: executing program 0 (id=1400): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1951, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x300, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.323433629s ago: executing program 0 (id=1403): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000001", 0x1c) 2.32276969s ago: executing program 0 (id=1404): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4c40, &(0x7f00000002c0)={[{@abort}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}]}, 0x1, 0x504, &(0x7f0000001480)="$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") fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f00000023c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b80)={0x400, [], 0xa9, "47fc03d0c289c0"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f70000000003000000500001800400028038000400200001000a00000000007da8e2a90000000000000000ffff7f000001000000001400020002000000ffffffff00000000000000000e0001006574683a766c616e30000000"], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.671281253s ago: executing program 3 (id=1425): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x0, 0x6000000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1.662295194s ago: executing program 3 (id=1426): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000001", 0x1c) 1.654045545s ago: executing program 3 (id=1427): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) timer_create(0x3, 0x0, &(0x7f0000000100)) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x567, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) 1.4656081s ago: executing program 3 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xce, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newaddrlabel={0xa0, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @dev}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @dev}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0xad, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x7}]}, 0xa0}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) syz_emit_ethernet(0x56, &(0x7f0000001440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x79, [@dev, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @private, @loopback]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x2c021}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x8000) 522.970187ms ago: executing program 3 (id=1432): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 386.030669ms ago: executing program 3 (id=1433): socket$inet(0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x7ffffffe}) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'wlan1\x00', {'veth1_to_team\x00'}, 0x4000}) socket$kcm(0x10, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000001940)=""/4098) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xb9, 0x1, 0x6, 0x6c8f, 0xf}}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x458) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) setresgid(0xee01, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 123.08865ms ago: executing program 4 (id=1434): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000340)=@framed={{}, [@btf_id]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) 122.68183ms ago: executing program 4 (id=1435): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 122.50445ms ago: executing program 4 (id=1436): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 122.12558ms ago: executing program 4 (id=1437): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x0, 0x6000000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 112.615691ms ago: executing program 4 (id=1438): r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r3}, 0x1) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@quota}]}, 0x1, 0x556, &(0x7f0000001100)="$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") mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 0s ago: executing program 4 (id=1439): syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 261215][ T5768] ? __kfree_skb+0x102/0x150 [ 69.265789][ T5768] ? consume_skb+0x57/0x180 [ 69.270322][ T5768] ? nlmon_xmit+0x51/0x60 [ 69.274718][ T5768] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 69.280065][ T5768] ? __dev_queue_xmit+0xb21/0x1e50 [ 69.285166][ T5768] ? ref_tracker_free+0x3a5/0x410 [ 69.290281][ T5768] ? __netlink_deliver_tap+0x495/0x4c0 [ 69.295777][ T5768] netlink_unicast+0x58d/0x660 [ 69.300610][ T5768] netlink_sendmsg+0x5ca/0x6e0 [ 69.305407][ T5768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.310850][ T5768] __sock_sendmsg+0x140/0x180 [ 69.315602][ T5768] ____sys_sendmsg+0x312/0x410 [ 69.320447][ T5768] __sys_sendmsg+0x1e9/0x280 [ 69.325022][ T5768] ? futex_wait+0x18e/0x1c0 [ 69.329518][ T5768] __x64_sys_sendmsg+0x46/0x50 [ 69.334284][ T5768] x64_sys_call+0x2689/0x2d60 [ 69.339035][ T5768] do_syscall_64+0xc9/0x1c0 [ 69.343533][ T5768] ? clear_bhb_loop+0x55/0xb0 [ 69.348205][ T5768] ? clear_bhb_loop+0x55/0xb0 [ 69.352883][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.358807][ T5768] RIP: 0033:0x7f1177c65a19 [ 69.363213][ T5768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.382807][ T5768] RSP: 002b:00007f1176ee7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.391265][ T5768] RAX: ffffffffffffffda RBX: 00007f1177df3f60 RCX: 00007f1177c65a19 [ 69.399324][ T5768] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 69.407279][ T5768] RBP: 00007f1177cd4e49 R08: 0000000000000000 R09: 0000000000000000 [ 69.415237][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.423249][ T5768] R13: 000000000000000b R14: 00007f1177df3f60 R15: 00007ffe85561d78 [ 69.431212][ T5768] [ 69.434273][ T5768] memory: usage 307200kB, limit 307200kB, failcnt 1032 [ 69.442201][ T5768] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 69.450179][ T5768] kmem: usage 306956kB, limit 9007199254740988kB, failcnt 0 [ 69.457477][ T5768] Memory cgroup stats for /syz4: [ 69.458905][ T5768] cache 233472 [ 69.461125][ T5798] loop3: detected capacity change from 0 to 2048 [ 69.463823][ T5768] rss 4096 [ 69.463831][ T5768] shmem 0 [ 69.463837][ T5768] mapped_file 1720320 [ 69.483404][ T5768] dirty 233472 [ 69.486904][ T5768] writeback 0 [ 69.490249][ T5768] workingset_refault_anon 141 [ 69.494894][ T5768] workingset_refault_file 167 [ 69.499662][ T5768] swap 462848 [ 69.503032][ T5768] swapcached 8192 [ 69.506724][ T5768] pgpgin 44426 [ 69.510075][ T5768] pgpgout 44367 [ 69.513506][ T5768] pgfault 38234 [ 69.516956][ T5768] pgmajfault 72 [ 69.520395][ T5768] inactive_anon 4096 [ 69.524256][ T5768] active_anon 4096 [ 69.527976][ T5768] inactive_file 233472 [ 69.532022][ T5768] active_file 0 [ 69.535480][ T5768] unevictable 0 [ 69.538917][ T5768] hierarchical_memory_limit 314572800 [ 69.544257][ T5768] hierarchical_memsw_limit 9223372036854771712 [ 69.550436][ T5768] total_cache 233472 [ 69.554357][ T5768] total_rss 4096 [ 69.557885][ T5768] total_shmem 0 [ 69.561378][ T5768] total_mapped_file 1720320 [ 69.565853][ T5768] total_dirty 233472 [ 69.569917][ T5768] total_writeback 0 [ 69.573700][ T5768] total_workingset_refault_anon 141 [ 69.579040][ T5768] total_workingset_refault_file 167 [ 69.584285][ T5768] total_swap 462848 [ 69.588097][ T5768] total_swapcached 8192 [ 69.592222][ T5768] total_pgpgin 44426 [ 69.596160][ T5768] total_pgpgout 44367 [ 69.600118][ T5768] total_pgfault 38234 [ 69.604067][ T5768] total_pgmajfault 72 [ 69.608032][ T5768] total_inactive_anon 4096 [ 69.612416][ T5768] total_active_anon 4096 [ 69.616719][ T5768] total_inactive_file 233472 [ 69.621315][ T5768] total_active_file 0 [ 69.625276][ T5768] total_unevictable 0 [ 69.629240][ T5768] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.832,pid=5767,uid=0 [ 69.644013][ T5768] Memory cgroup out of memory: Killed process 5767 (syz.4.832) total-vm:84472kB, anon-rss:452kB, file-rss:11600kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 69.705020][ T5799] loop3: p1 < > p4 [ 69.714923][ T5799] loop3: p4 size 8388608 extends beyond EOD, truncated [ 69.731431][ T5798] loop3: p1 < > p4 [ 69.753446][ T5798] loop3: p4 size 8388608 extends beyond EOD, truncated [ 69.967204][ T5768] syz.4.832 (5768) used greatest stack depth: 6296 bytes left [ 69.977134][ T5567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.006318][ T5255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.059498][ T5839] loop4: detected capacity change from 0 to 2048 [ 70.092943][ T5839] loop4: p1 < > p4 [ 70.097164][ T5839] loop4: p4 size 8388608 extends beyond EOD, truncated [ 70.145405][ T5846] pim6reg1: entered promiscuous mode [ 70.150701][ T5846] pim6reg1: entered allmulticast mode [ 70.403506][ T5567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.453149][ T5567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.499929][ T28] bridge_slave_1: left allmulticast mode [ 70.505586][ T28] bridge_slave_1: left promiscuous mode [ 70.511246][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.519035][ T28] bridge_slave_0: left allmulticast mode [ 70.524665][ T28] bridge_slave_0: left promiscuous mode [ 70.530421][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.619612][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.638294][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.649947][ T28] bond0 (unregistering): Released all slaves [ 70.658175][ T5860] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 70.665869][ T5860] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 70.673502][ T5860] __nla_validate_parse: 5 callbacks suppressed [ 70.673509][ T5860] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.871'. [ 70.709114][ T5567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.717649][ T5567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.728990][ T5567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.739749][ T5871] loop2: detected capacity change from 0 to 512 [ 70.751629][ T5567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.754902][ T5872] loop0: detected capacity change from 0 to 1024 [ 70.771420][ T28] hsr_slave_0: left promiscuous mode [ 70.777442][ T5872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.791237][ T28] hsr_slave_1: left promiscuous mode [ 70.797811][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.798416][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.805177][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.825082][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.832629][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.833655][ T5871] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.850602][ T5326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.861253][ T28] veth1_macvtap: left promiscuous mode [ 70.866792][ T28] veth0_macvtap: left promiscuous mode [ 70.872266][ T28] veth1_vlan: left promiscuous mode [ 70.877539][ T28] veth0_vlan: left promiscuous mode [ 70.897316][ T5881] loop0: detected capacity change from 0 to 1024 [ 70.912374][ T3083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.942752][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.946380][ T5881] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 71.002921][ T5326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.132159][ T28] team0 (unregistering): Port device team_slave_1 removed [ 71.142738][ T28] team0 (unregistering): Port device team_slave_0 removed [ 71.192540][ T5897] netlink: 'syz.0.884': attribute type 4 has an invalid length. [ 71.226258][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 71.258870][ T5907] loop3: detected capacity change from 0 to 2048 [ 71.279620][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.280757][ T5910] loop0: detected capacity change from 0 to 512 [ 71.305187][ T5567] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.313415][ T5910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.315000][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.333082][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.341577][ T5910] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.351466][ T5907] loop3: p1 < > p4 [ 71.356560][ T5907] loop3: p4 size 8388608 extends beyond EOD, truncated [ 71.357203][ T3153] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.370536][ T3153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.413787][ T5326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.436114][ T5567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.446518][ T5567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.515952][ T5922] loop0: detected capacity change from 0 to 512 [ 71.518981][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.540375][ T5922] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.892: corrupted in-inode xattr: invalid ea_ino [ 71.555887][ T5922] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.892: couldn't read orphan inode 15 (err -117) [ 71.568163][ T5922] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.601986][ T5326] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 71.670471][ T5567] veth0_vlan: entered promiscuous mode [ 71.680781][ T5567] veth1_vlan: entered promiscuous mode [ 71.702046][ T5567] veth0_macvtap: entered promiscuous mode [ 71.717971][ T5567] veth1_macvtap: entered promiscuous mode [ 71.735033][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.745485][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.755287][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.765733][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.775552][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.786128][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.795956][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.806378][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.817682][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.828399][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.838885][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.848767][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.859314][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.869462][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.880114][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.889916][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.900317][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.917970][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.929395][ T5567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.938162][ T5567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.946984][ T5567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955663][ T5567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.965917][ T5937] tap0: tun_chr_ioctl cmd 35108 [ 72.028658][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 72.028670][ T29] audit: type=1400 audit(1721187208.746:498): avc: denied { ioctl } for pid=5941 comm="syz.0.896" path="socket:[15280]" dev="sockfs" ino=15280 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.061144][ T5941] delete_channel: no stack [ 72.089072][ T5944] netlink: 'syz.1.897': attribute type 4 has an invalid length. [ 72.117486][ T29] audit: type=1400 audit(1721187208.837:499): avc: denied { block_suspend } for pid=5953 comm="syz.1.901" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.142407][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.901'. [ 72.151368][ T5954] netlink: 52 bytes leftover after parsing attributes in process `syz.1.901'. [ 72.160346][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 72.171167][ T5954] vlan0: entered allmulticast mode [ 72.176408][ T5954] veth0_vlan: entered allmulticast mode [ 72.221899][ T29] audit: type=1400 audit(1721187208.938:500): avc: denied { write } for pid=5955 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.269486][ T29] audit: type=1326 audit(1721187208.958:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.292840][ T29] audit: type=1326 audit(1721187208.958:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.316581][ T29] audit: type=1326 audit(1721187208.968:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.339931][ T29] audit: type=1326 audit(1721187208.968:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.363718][ T29] audit: type=1326 audit(1721187208.968:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.387212][ T29] audit: type=1326 audit(1721187208.968:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.410518][ T29] audit: type=1326 audit(1721187208.968:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f15dbc65a19 code=0x7ffc0000 [ 72.446253][ T5964] syzkaller0: entered promiscuous mode [ 72.451763][ T5964] syzkaller0: entered allmulticast mode [ 72.468968][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'. [ 72.516253][ T5975] delete_channel: no stack [ 72.541377][ T5982] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 72.611010][ T5984] loop3: detected capacity change from 0 to 1024 [ 72.624702][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.643512][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 72.674138][ T5415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.723698][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'. [ 72.732699][ T5995] netlink: 52 bytes leftover after parsing attributes in process `syz.0.918'. [ 72.741744][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 72.755051][ T5995] vlan0: entered allmulticast mode [ 72.760197][ T5995] veth0_vlan: entered allmulticast mode [ 72.851001][ T5997] loop3: detected capacity change from 0 to 1024 [ 72.872137][ T5997] ext4: Unknown parameter 'fowner<00000000000000000000' [ 72.924317][ T5997] loop3: detected capacity change from 0 to 512 [ 72.931041][ T5997] tmpfs: Unknown parameter 'max_batch_time' [ 72.957811][ T6008] delete_channel: no stack [ 72.997285][ T6013] loop4: detected capacity change from 0 to 256 [ 73.009568][ T6013] vfat: Unknown parameter '˙˙˙˙˙˙˙˙' [ 73.166095][ T6023] loop0: detected capacity change from 0 to 8192 [ 73.238826][ T6023] loop0: p1 p2 p4 [ 73.242578][ T6023] loop0: p1 size 108922248 extends beyond EOD, truncated [ 73.264836][ T6023] loop0: p2 start 861536256 is beyond EOD, truncated [ 73.272194][ T6023] loop0: p4 start 4194304 is beyond EOD, truncated [ 73.563124][ T6061] loop1: detected capacity change from 0 to 256 [ 73.608564][ T6040] loop3: detected capacity change from 0 to 1024 [ 73.617137][ T6040] ext4: Unknown parameter 'fowner<00000000000000000000' [ 73.645777][ T6062] loop0: detected capacity change from 0 to 1764 [ 73.718936][ T6040] loop3: detected capacity change from 0 to 512 [ 73.726903][ T6040] tmpfs: Unknown parameter 'max_batch_time' [ 73.780860][ T6068] loop3: detected capacity change from 0 to 128 [ 73.787689][ T6068] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.150866][ T6084] loop4: detected capacity change from 0 to 256 [ 74.433873][ T6086] loop0: detected capacity change from 0 to 1024 [ 74.449625][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.466701][ T6086] ext4: Unknown parameter 'fowner<00000000000000000000' [ 74.531814][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.583236][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.677495][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.715841][ T6105] loop3: detected capacity change from 0 to 1024 [ 74.729948][ T6105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.749396][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.765799][ T40] bridge_slave_1: left allmulticast mode [ 74.771462][ T40] bridge_slave_1: left promiscuous mode [ 74.777076][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.784837][ T40] bridge_slave_0: left allmulticast mode [ 74.790564][ T40] bridge_slave_0: left promiscuous mode [ 74.796176][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.810498][ T5415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.943765][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.955664][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.971533][ T6086] loop0: detected capacity change from 0 to 512 [ 74.983804][ T40] bond0 (unregistering): Released all slaves [ 74.997780][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 75.042581][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.049787][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.058512][ T6091] bridge_slave_0: entered allmulticast mode [ 75.064911][ T6091] bridge_slave_0: entered promiscuous mode [ 75.071800][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.078950][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.087211][ T6091] bridge_slave_1: entered allmulticast mode [ 75.093532][ T6091] bridge_slave_1: entered promiscuous mode [ 75.110452][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.122161][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.143775][ T40] hsr_slave_0: left promiscuous mode [ 75.149539][ T40] hsr_slave_1: left promiscuous mode [ 75.156354][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.163724][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.171279][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.178748][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.188990][ T40] veth1_macvtap: left promiscuous mode [ 75.194449][ T40] veth0_macvtap: left promiscuous mode [ 75.199961][ T40] veth1_vlan: left promiscuous mode [ 75.205247][ T40] veth0_vlan: left promiscuous mode [ 75.330661][ T40] team0 (unregistering): Port device team_slave_1 removed [ 75.343921][ T40] team0 (unregistering): Port device team_slave_0 removed [ 75.399477][ T6091] team0: Port device team_slave_0 added [ 75.407259][ T6091] team0: Port device team_slave_1 added [ 75.423352][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.430484][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.456388][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.484596][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.491541][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.517636][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.544613][ T6091] hsr_slave_0: entered promiscuous mode [ 75.550674][ T6091] hsr_slave_1: entered promiscuous mode [ 75.556580][ T6091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.564144][ T6091] Cannot create hsr debugfs directory [ 75.645028][ T6133] __nla_validate_parse: 2 callbacks suppressed [ 75.645041][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 75.695026][ T2750] kernel write not supported for file bpf-prog (pid: 2750 comm: kworker/1:2) [ 75.735572][ T6086] tmpfs: Unknown parameter 'max_batch_time' [ 75.746747][ T6135] loop3: detected capacity change from 0 to 2048 [ 75.854913][ T6091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.866167][ T6091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.874987][ T6091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.883605][ T6091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.922664][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.938463][ T6091] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.949153][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.956257][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.986129][ T6091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.996521][ T6091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.013630][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.020716][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.076426][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.092136][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 76.113635][ T6160] loop3: detected capacity change from 0 to 2048 [ 76.143867][ T6157] loop0: detected capacity change from 0 to 8192 [ 76.153179][ T6157] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.166284][ T6157] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 76.174553][ T6157] FAT-fs (loop0): Filesystem has been set read-only [ 76.187917][ T5326] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 76.237408][ T6091] veth0_vlan: entered promiscuous mode [ 76.245584][ T6091] veth1_vlan: entered promiscuous mode [ 76.260120][ T6091] veth0_macvtap: entered promiscuous mode [ 76.267387][ T6091] veth1_macvtap: entered promiscuous mode [ 76.277528][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.288676][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.298538][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.308964][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.319633][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.330175][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.340020][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.351029][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.363822][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.373979][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.385129][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.394962][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.405542][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.415976][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.426424][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.436267][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.447346][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.458667][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.470473][ T6091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.479272][ T6091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.488120][ T6091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.496798][ T6091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.580223][ T6186] loop4: detected capacity change from 0 to 128 [ 76.587010][ T6186] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 77.153100][ T6174] loop0: detected capacity change from 0 to 1024 [ 77.160628][ T6174] ext4: Unknown parameter 'fowner<00000000000000000000' [ 77.175228][ T6174] loop0: detected capacity change from 0 to 512 [ 77.181655][ T6174] tmpfs: Unknown parameter 'max_batch_time' [ 77.253006][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 77.253019][ T29] audit: type=1400 audit(1721187213.989:536): avc: denied { write } for pid=6191 comm="syz.0.990" path="socket:[17170]" dev="sockfs" ino=17170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.288044][ T29] audit: type=1400 audit(1721187214.029:537): avc: denied { setopt } for pid=6191 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.318479][ T29] audit: type=1400 audit(1721187214.059:538): avc: denied { nlmsg_write } for pid=6193 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 77.398592][ T6197] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.407406][ T6197] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.416108][ T6197] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.424831][ T6197] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.443455][ T6197] vxlan0: entered promiscuous mode [ 77.489142][ T6199] loop4: detected capacity change from 0 to 512 [ 77.496274][ T6199] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.505306][ T6199] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.517394][ T6199] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 77.525512][ T6199] System zones: 0-2, 18-18, 34-34 [ 77.530986][ T6199] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 77.546014][ T6199] EXT4-fs (loop4): 1 truncate cleaned up [ 77.552772][ T6199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.566584][ T29] audit: type=1326 audit(1721187214.311:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.4.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61f4a05a19 code=0x0 [ 77.795673][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.833312][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.884730][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.924287][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.960601][ T6206] chnl_net:caif_netlink_parms(): no params data found [ 77.993108][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.000437][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.008078][ T6206] bridge_slave_0: entered allmulticast mode [ 78.014508][ T6206] bridge_slave_0: entered promiscuous mode [ 78.021434][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028501][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.035725][ T6206] bridge_slave_1: entered allmulticast mode [ 78.042238][ T6206] bridge_slave_1: entered promiscuous mode [ 78.064574][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.080655][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.096303][ T40] bridge_slave_1: left allmulticast mode [ 78.101975][ T40] bridge_slave_1: left promiscuous mode [ 78.107545][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.116282][ T40] bridge_slave_0: left allmulticast mode [ 78.122007][ T40] bridge_slave_0: left promiscuous mode [ 78.127569][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.192424][ T6221] loop0: detected capacity change from 0 to 1024 [ 78.201567][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.212634][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.222945][ T40] bond0 (unregistering): Released all slaves [ 78.235034][ T6206] team0: Port device team_slave_0 added [ 78.242227][ T6206] team0: Port device team_slave_1 added [ 78.261776][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.269434][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.295327][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.307244][ T6225] netlink: 'syz.0.998': attribute type 10 has an invalid length. [ 78.319886][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.336286][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.344400][ T6225] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 78.353436][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.360491][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.386528][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.403798][ T40] hsr_slave_0: left promiscuous mode [ 78.409642][ T40] hsr_slave_1: left promiscuous mode [ 78.418550][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.426245][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.434029][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.441488][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.451013][ T40] veth1_macvtap: left promiscuous mode [ 78.456457][ T40] veth0_macvtap: left promiscuous mode [ 78.461955][ T40] veth1_vlan: left promiscuous mode [ 78.467206][ T40] veth0_vlan: left allmulticast mode [ 78.472553][ T40] veth0_vlan: left promiscuous mode [ 78.549615][ T40] team0 (unregistering): Port device team_slave_1 removed [ 78.559709][ T40] team0 (unregistering): Port device team_slave_0 removed [ 78.615603][ T6206] hsr_slave_0: entered promiscuous mode [ 78.622002][ T6206] hsr_slave_1: entered promiscuous mode [ 78.629103][ T6206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.638176][ T6206] Cannot create hsr debugfs directory [ 78.706143][ T29] audit: type=1400 audit(1721187215.456:540): avc: denied { getopt } for pid=6240 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.735170][ T29] audit: type=1326 audit(1721187215.486:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f4a05a19 code=0x7ffc0000 [ 78.758926][ T29] audit: type=1326 audit(1721187215.486:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f4a05a19 code=0x7ffc0000 [ 78.784151][ T29] audit: type=1326 audit(1721187215.537:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f61f4a05a19 code=0x7ffc0000 [ 78.808178][ T29] audit: type=1326 audit(1721187215.537:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f4a05a19 code=0x7ffc0000 [ 78.831502][ T29] audit: type=1326 audit(1721187215.537:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f4a05a19 code=0x7ffc0000 [ 79.027460][ T6206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.036596][ T6206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.040577][ T6254] loop4: detected capacity change from 0 to 1024 [ 79.051238][ T6206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.059756][ T6206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.085031][ T6256] loop4: detected capacity change from 0 to 512 [ 79.092107][ T6256] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.101826][ T6256] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 79.102025][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.118921][ T6256] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 79.123413][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.127602][ T6256] System zones: 0-2, 18-18, 34-34 [ 79.137023][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.145640][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.153343][ T6256] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.174562][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.181656][ T2750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.183945][ T6256] EXT4-fs (loop4): 1 truncate cleaned up [ 79.199117][ T6206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.209462][ T6206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.214092][ T6256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.271934][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.328673][ T6206] veth0_vlan: entered promiscuous mode [ 79.338930][ T6206] veth1_vlan: entered promiscuous mode [ 79.355552][ T6206] veth0_macvtap: entered promiscuous mode [ 79.363968][ T6206] veth1_macvtap: entered promiscuous mode [ 79.373511][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.383957][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.393845][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.404288][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.414101][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.424560][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.434383][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.444833][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.458898][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.471418][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.481912][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.491733][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.502767][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.512583][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.523055][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.533473][ T6206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.543965][ T6206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.555474][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.565940][ T6206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.574746][ T6206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.583507][ T6206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.592875][ T6206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.692551][ T6283] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 79.708565][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.720097][ T6283] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.919584][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.943909][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 79.957732][ T6308] loop1: detected capacity change from 0 to 1024 [ 79.964516][ T6308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.974955][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.998794][ T6206] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.014422][ T6312] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 80.122485][ T6323] loop1: detected capacity change from 0 to 1024 [ 80.132457][ T6323] loop1: detected capacity change from 0 to 128 [ 80.196093][ T6335] loop1: detected capacity change from 0 to 512 [ 80.203106][ T6335] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.212175][ T6335] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 80.221600][ T6335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 80.229762][ T6335] System zones: 0-2, 18-18, 34-34 [ 80.235170][ T6335] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.250216][ T6335] EXT4-fs (loop1): 1 truncate cleaned up [ 80.256132][ T6335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.400042][ T6342] loop0: detected capacity change from 0 to 2048 [ 80.409649][ T6342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.435544][ T40] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.450477][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 80.462889][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.462889][ T40] [ 80.472524][ T40] EXT4-fs (loop0): Total free blocks count 0 [ 80.478627][ T40] EXT4-fs (loop0): Free/Dirty block details [ 80.484518][ T40] EXT4-fs (loop0): free_blocks=2415919104 [ 80.490228][ T40] EXT4-fs (loop0): dirty_blocks=16 [ 80.495454][ T40] EXT4-fs (loop0): Block reservation details [ 80.501413][ T40] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 80.509513][ T5326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.554138][ T6353] loop0: detected capacity change from 0 to 1024 [ 80.564224][ T6353] loop0: detected capacity change from 0 to 128 [ 80.642807][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 80.669556][ T6369] mmap: syz.0.1047 (6369): VmData 20688896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 80.811859][ T6375] loop4: detected capacity change from 0 to 1024 [ 80.841899][ T6377] loop4: detected capacity change from 0 to 1024 [ 80.854159][ T6377] loop4: detected capacity change from 0 to 128 [ 81.033763][ T6206] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.123511][ T6385] chnl_net:caif_netlink_parms(): no params data found [ 81.184498][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.191773][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.200427][ T6385] bridge_slave_0: entered allmulticast mode [ 81.206847][ T6385] bridge_slave_0: entered promiscuous mode [ 81.214304][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.221364][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.228741][ T6385] bridge_slave_1: entered allmulticast mode [ 81.235073][ T6385] bridge_slave_1: entered promiscuous mode [ 81.256544][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.267571][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.287695][ T6385] team0: Port device team_slave_0 added [ 81.294135][ T6385] team0: Port device team_slave_1 added [ 81.308984][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.315950][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.341927][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.353318][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.360261][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.386154][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.410919][ T6385] hsr_slave_0: entered promiscuous mode [ 81.417921][ T6385] hsr_slave_1: entered promiscuous mode [ 81.423862][ T6385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.431383][ T6385] Cannot create hsr debugfs directory [ 81.486407][ T6385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.544606][ T6385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.582801][ T6385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.649215][ T6385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.715612][ T6385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.724227][ T6385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.732506][ T6385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.741184][ T6385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.755900][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.763005][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.770302][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.777345][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.819309][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.831926][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.840378][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.859878][ T6385] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.871350][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.878475][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.897358][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.904420][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.976779][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.109583][ T6385] veth0_vlan: entered promiscuous mode [ 82.117564][ T6385] veth1_vlan: entered promiscuous mode [ 82.242571][ T6464] TCP: TCP_TX_DELAY enabled [ 82.306444][ T6385] veth0_macvtap: entered promiscuous mode [ 82.376487][ T6385] veth1_macvtap: entered promiscuous mode [ 82.416832][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.427326][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.437135][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.447589][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.457429][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.467859][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.477694][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.488121][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.498322][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.508742][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.520935][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.529141][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.539710][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.549666][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.560110][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.569936][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.580343][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.590148][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.600602][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.610419][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.620877][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.633341][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.649408][ T6385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.658253][ T6385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.667017][ T6385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.676049][ T6385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.708469][ T6478] loop0: detected capacity change from 0 to 2048 [ 82.724788][ T6481] tipc: Started in network mode [ 82.729887][ T6481] tipc: Node identity 767648343da4, cluster identity 4711 [ 82.737083][ T6481] tipc: Enabled bearer , priority 0 [ 82.747296][ T6481] syzkaller0: MTU too low for tipc bearer [ 82.750178][ T6478] loop0: p1 < > p3 [ 82.753023][ T6481] tipc: Disabling bearer [ 82.757268][ T6478] loop0: p3 size 134217728 extends beyond EOD, truncated [ 82.783127][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 82.783180][ T29] audit: type=1400 audit(1721187219.554:568): avc: denied { getopt } for pid=6477 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.826584][ T6483] loop4: detected capacity change from 0 to 2048 [ 82.879550][ T29] audit: type=1326 audit(1721187219.654:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 82.902929][ T29] audit: type=1326 audit(1721187219.654:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 82.926953][ T29] audit: type=1326 audit(1721187219.654:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 82.951025][ T29] audit: type=1326 audit(1721187219.674:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 82.974322][ T29] audit: type=1326 audit(1721187219.674:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 82.998939][ T29] audit: type=1326 audit(1721187219.674:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 83.041884][ T29] audit: type=1400 audit(1721187219.724:575): avc: denied { sqpoll } for pid=6488 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.051982][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 83.061599][ T29] audit: type=1326 audit(1721187219.795:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f0a0aca67 code=0x7ffc0000 [ 83.069879][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 83.093716][ T29] audit: type=1326 audit(1721187219.795:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f0a051439 code=0x7ffc0000 [ 83.163378][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 83.281756][ T6518] loop2: detected capacity change from 0 to 2048 [ 83.298050][ T6522] tap0: tun_chr_ioctl cmd 1074812118 [ 83.313239][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 83.322127][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 83.341323][ T6518] loop2: p1 < > p3 [ 83.345740][ T6518] loop2: p3 size 134217728 extends beyond EOD, truncated [ 83.402818][ T6538] tipc: Started in network mode [ 83.407848][ T6538] tipc: Node identity 6e81db1c7383, cluster identity 4711 [ 83.407872][ T6538] tipc: Enabled bearer , priority 0 [ 83.429305][ T6538] syzkaller0: MTU too low for tipc bearer [ 83.429318][ T6538] tipc: Disabling bearer [ 83.447197][ T6540] loop1: detected capacity change from 0 to 2048 [ 83.533063][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1108'. [ 83.542578][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1113'. [ 83.629530][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 83.643259][ T6556] loop2: detected capacity change from 0 to 512 [ 83.656940][ T6556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.672681][ T6556] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 83.688001][ T6556] EXT4-fs (loop2): 1 truncate cleaned up [ 83.694046][ T6556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.717724][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.740962][ T6556] ALSA: seq fatal error: cannot create timer (-22) [ 83.809640][ T6580] loop4: detected capacity change from 0 to 512 [ 83.826166][ T6580] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1125: casefold flag without casefold feature [ 83.839444][ T6580] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1125: couldn't read orphan inode 15 (err -117) [ 83.843832][ T6583] loop2: detected capacity change from 0 to 512 [ 83.851974][ T6580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.914967][ T6583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.928521][ T6583] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.944250][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.006069][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 84.057772][ T6601] loop4: detected capacity change from 0 to 512 [ 84.090198][ T6601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.102995][ T6601] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.134077][ T6601] can0: slcan on ttyS3. [ 84.156937][ T6561] syz.0.1118 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 84.168121][ T6561] CPU: 0 PID: 6561 Comm: syz.0.1118 Not tainted 6.10.0-syzkaller-02711-g0434dbe32053 #0 [ 84.177835][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.187887][ T6561] Call Trace: [ 84.191156][ T6561] [ 84.194118][ T6561] dump_stack_lvl+0xf2/0x150 [ 84.198708][ T6561] dump_stack+0x15/0x20 [ 84.202907][ T6561] dump_header+0x83/0x2d0 [ 84.207240][ T6561] oom_kill_process+0x33e/0x4c0 [ 84.209201][ T6607] loop1: detected capacity change from 0 to 512 [ 84.212173][ T6561] out_of_memory+0x9af/0xbe0 [ 84.219654][ T6607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.222941][ T6561] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 84.238910][ T6561] mem_cgroup_out_of_memory+0x13e/0x190 [ 84.244502][ T6561] try_charge_memcg+0x745/0xcd0 [ 84.249399][ T6561] ? _raw_spin_unlock+0x26/0x50 [ 84.254234][ T6561] ? radix_tree_lookup+0xf9/0x150 [ 84.259244][ T6561] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 84.265326][ T6561] __read_swap_cache_async+0x2b9/0x520 [ 84.270775][ T6561] swap_cluster_readahead+0x276/0x3f0 [ 84.276166][ T6561] swapin_readahead+0xe2/0x7a0 [ 84.280918][ T6561] ? __filemap_get_folio+0x420/0x5b0 [ 84.286195][ T6561] ? swap_cache_get_folio+0x6e/0x210 [ 84.291526][ T6561] do_swap_page+0x3bc/0x1840 [ 84.296162][ T6561] ? cgroup_rstat_updated+0x99/0x550 [ 84.301431][ T6561] ? __rcu_read_lock+0x36/0x50 [ 84.306177][ T6561] handle_mm_fault+0x8b9/0x2ac0 [ 84.311104][ T6561] exc_page_fault+0x3b9/0x650 [ 84.315840][ T6561] asm_exc_page_fault+0x26/0x30 [ 84.320679][ T6561] RIP: 0033:0x7f09c5f879b3 [ 84.325077][ T6561] Code: 19 07 00 48 8d 3d 16 1a 07 00 e8 f8 49 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 7e db 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 84.344710][ T6561] RSP: 002b:00007ffea96b1eb8 EFLAGS: 00010293 [ 84.350763][ T6561] RAX: 00000000fffffffa RBX: 00007f09c60e3f60 RCX: 0000000000000000 [ 84.358798][ T6561] RDX: 00007ffea96b1ed0 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.366756][ T6561] RBP: 00007f09c60e5a60 R08: 0000000023d47f82 R09: 7fffffffffffffff [ 84.374719][ T6561] R10: 0000000000000000 R11: 00007f09c60ba080 R12: 0000000000014b98 [ 84.382675][ T6561] R13: 0000000000000032 R14: 00007f09c60e5a60 R15: 00007ffea96b1fe0 [ 84.390749][ T6561] [ 84.394383][ T6561] memory: usage 307184kB, limit 307200kB, failcnt 2603 [ 84.401223][ T6561] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0 [ 84.409611][ T6561] kmem: usage 301088kB, limit 9007199254740988kB, failcnt 0 [ 84.416930][ T6561] Memory cgroup stats for /syz0: [ 84.417289][ T6601] can0 (unregistered): slcan off ttyS3. [ 84.428455][ T6601] Falling back ldisc for ttyS3. [ 84.433136][ T6561] cache 135168 [ 84.436664][ T6561] rss 0 [ 84.439407][ T6561] shmem 0 [ 84.442339][ T6561] mapped_file 135168 [ 84.446966][ T6561] dirty 135168 [ 84.450351][ T6561] writeback 8192 [ 84.453926][ T6561] workingset_refault_anon 8 [ 84.458414][ T6561] workingset_refault_file 0 [ 84.462958][ T6561] swap 323584 [ 84.466226][ T6561] swapcached 24576 [ 84.469961][ T6561] pgpgin 34552 [ 84.474060][ T6561] pgpgout 34513 [ 84.477500][ T6561] pgfault 31578 [ 84.480944][ T6561] pgmajfault 6 [ 84.484309][ T6561] inactive_anon 24576 [ 84.488325][ T6561] active_anon 0 [ 84.491772][ T6561] inactive_file 135168 [ 84.495880][ T6561] active_file 0 [ 84.499324][ T6561] unevictable 0 [ 84.503384][ T6561] hierarchical_memory_limit 314572800 [ 84.508741][ T6561] hierarchical_memsw_limit 9223372036854771712 [ 84.514934][ T6561] total_cache 135168 [ 84.518815][ T6561] total_rss 0 [ 84.522090][ T6561] total_shmem 0 [ 84.526098][ T6561] total_mapped_file 135168 [ 84.530519][ T6561] total_dirty 135168 [ 84.535048][ T6561] total_writeback 8192 [ 84.538128][ T6607] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 84.539128][ T6561] total_workingset_refault_anon 8 [ 84.539138][ T6561] total_workingset_refault_file 0 [ 84.539145][ T6561] total_swap 323584 [ 84.547396][ T6607] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 84.552377][ T6561] total_swapcached 24576 [ 84.552385][ T6561] total_pgpgin 34552 [ 84.552392][ T6561] total_pgpgout 34513 [ 84.552398][ T6561] total_pgfault 31578 [ 84.552405][ T6561] total_pgmajfault 6 [ 84.552412][ T6561] total_inactive_anon 24576 [ 84.563575][ T6607] EXT4-fs (loop1): 1 truncate cleaned up [ 84.570087][ T6561] total_active_anon 0 [ 84.579851][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.581543][ T6561] total_inactive_file 135168 [ 84.581552][ T6561] total_active_file 0 [ 84.581559][ T6561] total_unevictable 0 [ 84.586307][ T6607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.589394][ T6561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1118,pid=6561,uid=0 [ 84.652451][ T6561] Memory cgroup out of memory: Killed process 6561 (syz.0.1118) total-vm:80620kB, anon-rss:452kB, file-rss:9656kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 84.671341][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.691722][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.727968][ T6607] ALSA: seq fatal error: cannot create timer (-22) [ 84.764718][ T6619] vhci_hcd: invalid port number 253 [ 84.770023][ T6619] vhci_hcd: invalid port number 253 [ 84.846234][ T6635] ALSA: seq fatal error: cannot create timer (-19) [ 84.856567][ T6628] loop0: detected capacity change from 0 to 512 [ 84.866720][ T6628] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.1141: casefold flag without casefold feature [ 84.903288][ T6628] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1141: couldn't read orphan inode 15 (err -117) [ 84.922001][ T6628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.952478][ T5326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.038940][ T6654] loop0: detected capacity change from 0 to 512 [ 85.045804][ T6654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.057063][ T6654] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 85.071924][ T6654] EXT4-fs (loop0): 1 truncate cleaned up [ 85.077932][ T6654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.091623][ T6654] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.107448][ T6654] ALSA: seq fatal error: cannot create timer (-22) [ 85.654210][ T6698] __nla_validate_parse: 10 callbacks suppressed [ 85.654225][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'. [ 85.770916][ T6715] loop2: detected capacity change from 0 to 512 [ 85.802345][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.819589][ T6715] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.856460][ T6726] loop1: detected capacity change from 0 to 256 [ 85.859582][ T6715] can0: slcan on ttyS3. [ 85.898159][ T6726] loop1: detected capacity change from 256 to 11 [ 85.898791][ T6715] can0 (unregistered): slcan off ttyS3. [ 85.910303][ T6715] Falling back ldisc for ttyS3. [ 85.935234][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.104589][ T6748] loop2: detected capacity change from 0 to 512 [ 86.112241][ T6748] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1190: casefold flag without casefold feature [ 86.126328][ T6748] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1190: couldn't read orphan inode 15 (err -117) [ 86.139113][ T6748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.140878][ T6206] FAT-fs (loop1): Directory bread(block 3) failed [ 86.183413][ T40] FAT-fs (loop1): unable to read inode block for updating (i_pos 201) [ 86.204540][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.340896][ T6755] chnl_net:caif_netlink_parms(): no params data found [ 86.385912][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.392984][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.400304][ T6755] bridge_slave_0: entered allmulticast mode [ 86.406779][ T6755] bridge_slave_0: entered promiscuous mode [ 86.415059][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.422168][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.429425][ T6755] bridge_slave_1: entered allmulticast mode [ 86.435791][ T6755] bridge_slave_1: entered promiscuous mode [ 86.468428][ T6755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.479144][ T6755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.504281][ T6755] team0: Port device team_slave_0 added [ 86.513585][ T6755] team0: Port device team_slave_1 added [ 86.537164][ T1438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.560766][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.567878][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.594432][ T6755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.603073][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.612162][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.612246][ T6755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.651432][ T1438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.700681][ T1438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.714527][ T6755] hsr_slave_0: entered promiscuous mode [ 86.721926][ T6755] hsr_slave_1: entered promiscuous mode [ 86.728092][ T6755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.735775][ T6755] Cannot create hsr debugfs directory [ 86.743576][ T1438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.804461][ T6797] loop4: detected capacity change from 0 to 256 [ 86.895281][ T6797] loop4: detected capacity change from 256 to 11 [ 86.905294][ T1438] bridge_slave_1: left allmulticast mode [ 86.910938][ T1438] bridge_slave_1: left promiscuous mode [ 86.916889][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.932615][ T1438] bridge_slave_0: left allmulticast mode [ 86.938323][ T1438] bridge_slave_0: left promiscuous mode [ 86.943910][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.068646][ T1438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.079415][ T1438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.089459][ T1438] bond0 (unregistering): Released all slaves [ 87.150572][ T6783] chnl_net:caif_netlink_parms(): no params data found [ 87.159443][ T6826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1213'. [ 87.168419][ T6826] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 87.185481][ T6091] FAT-fs (loop4): Directory bread(block 3) failed [ 87.208480][ T6826] loop0: detected capacity change from 0 to 512 [ 87.215144][ T1438] hsr_slave_0: left promiscuous mode [ 87.220944][ T6826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.224361][ T11] FAT-fs (loop4): unable to read inode block for updating (i_pos 201) [ 87.235089][ T6826] EXT4-fs (loop0): 1 orphan inode deleted [ 87.245259][ T6826] EXT4-fs (loop0): 1 truncate cleaned up [ 87.251219][ T1438] hsr_slave_1: left promiscuous mode [ 87.251542][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.268640][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.276228][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.284195][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.291602][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.300910][ T1438] veth1_macvtap: left promiscuous mode [ 87.306458][ T1438] veth0_macvtap: left promiscuous mode [ 87.312022][ T1438] veth1_vlan: left promiscuous mode [ 87.317311][ T1438] veth0_vlan: left promiscuous mode [ 87.362832][ T6826] program syz.0.1213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.382123][ T5326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.415271][ T1438] team0 (unregistering): Port device team_slave_1 removed [ 87.427497][ T1438] team0 (unregistering): Port device team_slave_0 removed [ 87.475551][ T6834] veth1_to_hsr: entered promiscuous mode [ 87.487180][ T6839] syzkaller0: entered promiscuous mode [ 87.511195][ T6833] syzkaller0 (unregistering): left promiscuous mode [ 87.564041][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.571088][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.578799][ T6783] bridge_slave_0: entered allmulticast mode [ 87.585228][ T6783] bridge_slave_0: entered promiscuous mode [ 87.592120][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.599171][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.607097][ T6783] bridge_slave_1: entered allmulticast mode [ 87.613649][ T6783] bridge_slave_1: entered promiscuous mode [ 87.631217][ T6832] veth1_to_hsr: left promiscuous mode [ 87.638383][ T6783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.660502][ T6783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.677801][ T6755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.688390][ T6755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.706504][ T6783] team0: Port device team_slave_0 added [ 87.712762][ T6783] team0: Port device team_slave_1 added [ 87.718790][ T6755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.735188][ T6755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.857764][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.864790][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.891222][ T6783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.957686][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.964712][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.991226][ T6783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.034352][ T1438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.045984][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 88.085158][ T6783] hsr_slave_0: entered promiscuous mode [ 88.091326][ T6783] hsr_slave_1: entered promiscuous mode [ 88.097179][ T6783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.105327][ T6783] Cannot create hsr debugfs directory [ 88.130794][ T1438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.148163][ T6755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.160422][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 88.160499][ T29] audit: type=1400 audit(1721187224.951:878): avc: denied { read } for pid=6882 comm="syz.2.1236" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.178218][ T6755] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.190920][ T29] audit: type=1400 audit(1721187224.951:879): avc: denied { open } for pid=6882 comm="syz.2.1236" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.216052][ T6755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.233160][ T6755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.243508][ T29] audit: type=1400 audit(1721187224.991:880): avc: denied { ioctl } for pid=6882 comm="syz.2.1236" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.283306][ T3153] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.290379][ T3153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.299189][ T3153] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.306286][ T3153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.334778][ T1438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.396622][ T6783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.423768][ T1438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.435570][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 88.447897][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 88.478066][ T6783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.523496][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.530543][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.538385][ T6853] bridge_slave_0: entered allmulticast mode [ 88.549665][ T29] audit: type=1326 audit(1721187225.331:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 88.561399][ T6853] bridge_slave_0: entered promiscuous mode [ 88.572974][ T29] audit: type=1326 audit(1721187225.331:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 88.602075][ T29] audit: type=1326 audit(1721187225.331:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 88.605189][ T6916] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 88.625432][ T29] audit: type=1326 audit(1721187225.331:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 88.625458][ T29] audit: type=1326 audit(1721187225.331:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f0a0b459f code=0x7ffc0000 [ 88.625481][ T29] audit: type=1326 audit(1721187225.331:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 88.625568][ T29] audit: type=1326 audit(1721187225.331:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0a0b5a19 code=0x7ffc0000 [ 88.730827][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.737923][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.755924][ T6853] bridge_slave_1: entered allmulticast mode [ 88.764569][ T6853] bridge_slave_1: entered promiscuous mode [ 88.774810][ T6783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.796181][ T6755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.835419][ T6783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.858495][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.868764][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1249'. [ 88.882751][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.909334][ T6924] loop2: detected capacity change from 0 to 512 [ 88.928435][ T1438] bridge_slave_1: left allmulticast mode [ 88.932054][ T6930] tipc: Can't bind to reserved service type 0 [ 88.934098][ T1438] bridge_slave_1: left promiscuous mode [ 88.946343][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.954576][ T1438] bridge_slave_0: left allmulticast mode [ 88.960260][ T1438] bridge_slave_0: left promiscuous mode [ 88.965902][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.974409][ T6924] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1248: casefold flag without casefold feature [ 88.987458][ T6924] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1248: couldn't read orphan inode 15 (err -117) [ 88.988418][ T1438] bridge_slave_1: left allmulticast mode [ 89.005368][ T1438] bridge_slave_1: left promiscuous mode [ 89.011012][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.018605][ T6924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.031677][ T1438] bridge_slave_0: left allmulticast mode [ 89.037318][ T1438] bridge_slave_0: left promiscuous mode [ 89.042972][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.052970][ T6385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.101550][ T6942] loop2: detected capacity change from 0 to 256 [ 89.159142][ T6942] loop2: detected capacity change from 256 to 11 [ 89.391643][ T6385] FAT-fs (loop2): Directory bread(block 3) failed [ 89.402146][ T2037] FAT-fs (loop2): unable to read inode block for updating (i_pos 201) [ 89.421182][ T1438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.431388][ T1438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.441670][ T1438] bond0 (unregistering): Released all slaves [ 89.450700][ T1438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.460463][ T1438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.471537][ T1438] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 89.480722][ T1438] bond0 (unregistering): Released all slaves [ 89.488163][ T6930] bond_slave_0: entered promiscuous mode [ 89.493812][ T6930] bond_slave_1: entered promiscuous mode [ 89.499461][ T6930] batadv0: entered promiscuous mode [ 89.505434][ T6853] team0: Port device team_slave_0 added [ 89.519122][ T6853] team0: Port device team_slave_1 added [ 89.551423][ T1438] tipc: Left network mode [ 89.551432][ T6930] bond_slave_0: left promiscuous mode [ 89.561124][ T6930] bond_slave_1: left promiscuous mode [ 89.566476][ T6930] batadv0: left promiscuous mode [ 89.592551][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.599543][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.625465][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.637461][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.644475][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.670417][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.687831][ T6783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.697082][ T6783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.721205][ T6853] hsr_slave_0: entered promiscuous mode [ 89.730258][ T6853] hsr_slave_1: entered promiscuous mode [ 89.736692][ T6853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.745111][ T6853] Cannot create hsr debugfs directory [ 89.750567][ T6783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.766741][ T6783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.781436][ T6755] veth0_vlan: entered promiscuous mode [ 89.799618][ T1438] hsr_slave_0: left promiscuous mode [ 89.805495][ T1438] hsr_slave_1: left promiscuous mode [ 89.811786][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.819369][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.827351][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.834828][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.844446][ T1438] hsr_slave_0: left promiscuous mode [ 89.850407][ T1438] hsr_slave_1: left promiscuous mode [ 89.856102][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.863580][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.871733][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.879169][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.889563][ T1438] veth1_macvtap: left promiscuous mode [ 89.895124][ T1438] veth0_macvtap: left promiscuous mode [ 89.901325][ T1438] veth1_vlan: left promiscuous mode [ 89.906536][ T1438] veth0_vlan: left promiscuous mode [ 89.912923][ T1438] veth1_macvtap: left promiscuous mode [ 89.918453][ T1438] veth0_macvtap: left promiscuous mode [ 89.924015][ T1438] veth1_vlan: left promiscuous mode [ 89.929637][ T1438] veth0_vlan: left promiscuous mode [ 90.050104][ T1438] team0 (unregistering): Port device team_slave_1 removed [ 90.060628][ T1438] team0 (unregistering): Port device team_slave_0 removed [ 90.123601][ T1438] team0 (unregistering): Port device team_slave_1 removed [ 90.133237][ T1438] team0 (unregistering): Port device team_slave_0 removed [ 90.173674][ T6755] veth1_vlan: entered promiscuous mode [ 90.236159][ T6755] veth0_macvtap: entered promiscuous mode [ 90.273468][ T6755] veth1_macvtap: entered promiscuous mode [ 90.312110][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.323188][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.333074][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.343573][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.353735][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.364154][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.382113][ T6755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.391764][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 90.396253][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.412311][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.422769][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.432640][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.443254][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.453075][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.463612][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.474238][ T6755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.485187][ T6970] loop0: detected capacity change from 0 to 256 [ 90.496913][ T6755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505624][ T6755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.514372][ T6755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.523151][ T6755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.543840][ T6783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.565897][ T6970] loop0: detected capacity change from 256 to 11 [ 90.577558][ T3153] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.584616][ T3153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.605123][ T3153] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.612313][ T3153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.643484][ T6783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.654205][ T6783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.683493][ T6978] loop3: detected capacity change from 0 to 512 [ 90.692021][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 90.711686][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.724334][ T6978] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.752074][ T6978] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz.3.1260: path /1/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 90.778403][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.785579][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.792845][ T6949] bridge_slave_0: entered allmulticast mode [ 90.806082][ T6949] bridge_slave_0: entered promiscuous mode [ 90.816460][ T5326] FAT-fs (loop0): Directory bread(block 3) failed [ 90.833447][ T6783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.843280][ T1960] FAT-fs (loop0): unable to read inode block for updating (i_pos 201) [ 90.861208][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.868294][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.877983][ T6949] bridge_slave_1: entered allmulticast mode [ 90.884372][ T6949] bridge_slave_1: entered promiscuous mode [ 90.903243][ T6853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.931390][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.942781][ T6853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.953001][ T6853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.967700][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.977505][ T6853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.032684][ T6949] team0: Port device team_slave_0 added [ 91.053495][ T6949] team0: Port device team_slave_1 added [ 91.106243][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.113227][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.139860][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.176152][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.183127][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.209094][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.263679][ T6949] hsr_slave_0: entered promiscuous mode [ 91.271756][ T6949] hsr_slave_1: entered promiscuous mode [ 91.286549][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.294088][ T6949] Cannot create hsr debugfs directory [ 91.302771][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.313216][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.345667][ T6783] veth0_vlan: entered promiscuous mode [ 91.376057][ T6783] veth1_vlan: entered promiscuous mode [ 91.401597][ T6783] veth0_macvtap: entered promiscuous mode [ 91.420350][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.430653][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.463503][ T6783] veth1_macvtap: entered promiscuous mode [ 91.524098][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.534426][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.563367][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.566152][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.585627][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.596111][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.605898][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.616299][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.626173][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.636589][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.646396][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.656828][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.667731][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.681259][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.691622][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.704449][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.714901][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.724705][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.735134][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.744994][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.755422][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.765313][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.775729][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.787399][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.811064][ T6783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.819842][ T6783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.829014][ T6783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.837731][ T6783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.854455][ T6949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.875606][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.908183][ T6949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.931814][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 91.950843][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.958066][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.968087][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.975121][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.987924][ T6949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.032690][ T6853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.043160][ T6853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.069245][ T6949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.088255][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.096103][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.103965][ T6992] bridge_slave_0: entered allmulticast mode [ 92.110402][ T6992] bridge_slave_0: entered promiscuous mode [ 92.118396][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.125798][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.133047][ T6992] bridge_slave_1: entered allmulticast mode [ 92.139319][ T6992] bridge_slave_1: entered promiscuous mode [ 92.159537][ T28] bridge_slave_1: left allmulticast mode [ 92.165220][ T28] bridge_slave_1: left promiscuous mode [ 92.170783][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.180366][ T28] bridge_slave_0: left allmulticast mode [ 92.186175][ T28] bridge_slave_0: left promiscuous mode [ 92.191793][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.206039][ T28] bridge_slave_1: left allmulticast mode [ 92.211729][ T28] bridge_slave_1: left promiscuous mode [ 92.217372][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.225269][ T28] bridge_slave_0: left allmulticast mode [ 92.230892][ T28] bridge_slave_0: left promiscuous mode [ 92.236560][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.443590][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.454908][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.465427][ T28] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 92.475312][ T28] bond0 (unregistering): Released all slaves [ 92.484396][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.494796][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.504919][ T28] bond0 (unregistering): Released all slaves [ 92.515494][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.526413][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.557350][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.566421][ T28] tipc: Left network mode [ 92.567009][ T6992] team0: Port device team_slave_0 added [ 92.578475][ T6992] team0: Port device team_slave_1 added [ 92.590952][ T6949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.621798][ T6949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.633958][ T6949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.653838][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.660792][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.686799][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.700637][ T6949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.710410][ T28] hsr_slave_0: left promiscuous mode [ 92.716534][ T28] hsr_slave_1: left promiscuous mode [ 92.727221][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.734709][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.735892][ T7038] loop3: detected capacity change from 0 to 512 [ 92.748557][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.756435][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.764568][ T7038] EXT4-fs (loop3): 1 truncate cleaned up [ 92.770290][ T28] hsr_slave_0: left promiscuous mode [ 92.770806][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.788117][ T28] hsr_slave_1: left promiscuous mode [ 92.794354][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.801876][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.809399][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.817514][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.825460][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.834727][ T28] veth1_macvtap: left promiscuous mode [ 92.840181][ T28] veth0_macvtap: left promiscuous mode [ 92.846327][ T28] veth1_vlan: left promiscuous mode [ 92.851643][ T28] veth0_vlan: left allmulticast mode [ 92.854784][ T7043] loop1: detected capacity change from 0 to 128 [ 92.856913][ T28] veth0_vlan: left promiscuous mode [ 92.876114][ T28] veth1_macvtap: left promiscuous mode [ 92.881638][ T28] veth0_macvtap: left promiscuous mode [ 92.887151][ T28] veth1_vlan: left promiscuous mode [ 92.892402][ T28] veth0_vlan: left promiscuous mode [ 93.022295][ T28] team0 (unregistering): Port device team_slave_1 removed [ 93.033624][ T28] team0 (unregistering): Port device team_slave_0 removed [ 93.095254][ T28] team0 (unregistering): Port device team_slave_1 removed [ 93.107263][ T28] team0 (unregistering): Port device team_slave_0 removed [ 93.141625][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.148610][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.174501][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.223002][ T6992] hsr_slave_0: entered promiscuous mode [ 93.229099][ T6992] hsr_slave_1: entered promiscuous mode [ 93.236735][ T6992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.244645][ T6992] Cannot create hsr debugfs directory [ 93.305815][ T7055] bond_slave_0: entered promiscuous mode [ 93.311489][ T7055] bond_slave_1: entered promiscuous mode [ 93.358857][ T7055] bond_slave_0: left promiscuous mode [ 93.364264][ T7055] bond_slave_1: left promiscuous mode [ 93.377792][ T6853] veth0_vlan: entered promiscuous mode [ 93.404587][ T6853] veth1_vlan: entered promiscuous mode [ 93.418060][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.434691][ T6853] veth0_macvtap: entered promiscuous mode [ 93.442022][ T7074] loop1: detected capacity change from 0 to 512 [ 93.450128][ T7074] EXT4-fs: Ignoring removed i_version option [ 93.452095][ T6853] veth1_macvtap: entered promiscuous mode [ 93.469617][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.480516][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.490358][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.500783][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.511023][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.521530][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.531610][ T7074] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.1281: casefold flag without casefold feature [ 93.532520][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.552507][ T7074] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1281: couldn't read orphan inode 15 (err -117) [ 93.556466][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.576637][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.583754][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.597300][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.604337][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.613979][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.624511][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.634936][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.645350][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.655145][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.666165][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.680588][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.696909][ T6853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.705705][ T6853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.714543][ T6853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.723852][ T6853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.753182][ T6949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.763533][ T6949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.858852][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.880756][ T6992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.895910][ T6992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.922674][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1287'. [ 93.934857][ T7102] loop1: detected capacity change from 0 to 256 [ 93.938563][ T6992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.948422][ T7102] vfat: Unknown parameter 'u˙˙˙˙late' [ 93.958328][ T6992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.014579][ T7112] loop4: detected capacity change from 0 to 128 [ 94.030922][ T6949] veth0_vlan: entered promiscuous mode [ 94.045399][ T6949] veth1_vlan: entered promiscuous mode [ 94.051471][ T7112] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.056894][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.100708][ T6949] veth0_macvtap: entered promiscuous mode [ 94.113538][ T6949] veth1_macvtap: entered promiscuous mode [ 94.124322][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 94.124332][ T29] audit: type=1400 audit(1721187230.923:924): avc: denied { setattr } for pid=7111 comm="syz.4.1290" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.131094][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.163365][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.173252][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.184338][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.194145][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.204568][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.214923][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.225393][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.237387][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.248459][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.259050][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.269465][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.279956][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.289937][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.301001][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.310812][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.321277][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.333538][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.344545][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.378169][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.398618][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.405683][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.419991][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.427026][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.453722][ T6949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462463][ T6949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.471197][ T6949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.480584][ T6949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.503136][ T6992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.514125][ T6992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.602628][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.699262][ T6992] veth0_vlan: entered promiscuous mode [ 94.721636][ T6992] veth1_vlan: entered promiscuous mode [ 94.736557][ T7140] pim6reg: entered allmulticast mode [ 94.745697][ T7140] pim6reg: left allmulticast mode [ 94.781972][ T6992] veth0_macvtap: entered promiscuous mode [ 94.793748][ T6992] veth1_macvtap: entered promiscuous mode [ 94.805758][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.817069][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.827127][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.838306][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.848146][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.858561][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.869101][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.879583][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.889412][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.900470][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.913097][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'. [ 94.926110][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.934854][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.945314][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.955176][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.966266][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.976130][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.986938][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.996897][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.008021][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.022822][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.047194][ T29] audit: type=1400 audit(1721187231.835:925): avc: denied { write } for pid=7149 comm="syz.3.1300" name="fdinfo" dev="proc" ino=23577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.050409][ T7154] loop2: detected capacity change from 0 to 256 [ 95.069562][ T29] audit: type=1400 audit(1721187231.835:926): avc: denied { add_name } for pid=7149 comm="syz.3.1300" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.083336][ T7148] loop1: detected capacity change from 0 to 512 [ 95.095360][ T29] audit: type=1400 audit(1721187231.835:927): avc: denied { create } for pid=7149 comm="syz.3.1300" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 95.122020][ T7148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.121998][ T29] audit: type=1400 audit(1721187231.845:928): avc: denied { associate } for pid=7149 comm="syz.3.1300" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.154081][ T6992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.163455][ T6992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.172325][ T6992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.181048][ T6992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.195918][ T29] audit: type=1400 audit(1721187231.935:929): avc: denied { ioctl } for pid=7153 comm="syz.2.1301" path="socket:[23585]" dev="sockfs" ino=23585 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.200649][ T7148] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.298165][ T7170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1306'. [ 95.308106][ T29] audit: type=1400 audit(1721187232.105:930): avc: denied { bind } for pid=7163 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.320155][ T7148] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.359450][ T7170] loop4: detected capacity change from 0 to 256 [ 95.366004][ T7170] vfat: Unknown parameter 'u˙˙˙˙late' [ 95.386913][ T29] audit: type=1400 audit(1721187232.176:931): avc: denied { connect } for pid=7172 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.393408][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1309'. [ 95.426041][ T29] audit: type=1400 audit(1721187232.216:932): avc: denied { rename } for pid=7147 comm="syz.1.1299" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.454136][ T7182] loop2: detected capacity change from 0 to 256 [ 95.481865][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 95.492423][ T29] audit: type=1400 audit(1721187232.296:933): avc: denied { ioctl } for pid=7147 comm="syz.1.1299" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 95.665580][ T7203] SELinux: failed to load policy [ 95.673175][ T7203] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1318'. [ 95.694128][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.791364][ T6783] EXT4-fs unmount: 5 callbacks suppressed [ 95.791379][ T6783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.810807][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1322'. [ 95.838258][ T7217] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 95.934451][ T7234] loop3: detected capacity change from 0 to 512 [ 95.951864][ T7234] EXT4-fs: Ignoring removed i_version option [ 95.974673][ T7234] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1332: casefold flag without casefold feature [ 96.000249][ T7234] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1332: couldn't read orphan inode 15 (err -117) [ 96.036887][ T7234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.072860][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.100188][ T7249] loop3: detected capacity change from 0 to 2048 [ 96.106649][ T7250] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 96.117239][ T7249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.246685][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.357639][ T7276] loop1: detected capacity change from 0 to 1024 [ 96.379408][ T7276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.395428][ T7276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.400316][ T7282] loop3: detected capacity change from 0 to 2048 [ 96.436146][ T6783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.457781][ T7282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.474710][ T7294] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 96.530893][ T7300] loop4: detected capacity change from 0 to 512 [ 96.555975][ T7300] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.563950][ T7300] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 96.600973][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.601777][ T7300] System zones: 0-1, 15-15, 18-18, 34-34 [ 96.624810][ T7300] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.638722][ T7300] EXT4-fs warning (device loop4): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.653495][ T7300] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 96.662848][ T7300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1357: bg 0: block 40: padding at end of block bitmap is not set [ 96.686936][ T7300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 96.698477][ T7300] EXT4-fs (loop4): 1 truncate cleaned up [ 96.704919][ T7300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.756975][ T7300] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1357: corrupted xattr block 19: bad e_name length [ 96.772443][ T7300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.792588][ T7300] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1357: corrupted xattr block 19: bad e_name length [ 96.806765][ T7300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.818038][ T7300] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1357: corrupted xattr block 19: bad e_name length [ 96.833676][ T7300] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.853522][ T6853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.868424][ T7319] loop0: detected capacity change from 0 to 1024 [ 96.879920][ T7319] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.899702][ T7324] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.1366'. [ 96.901386][ T7322] loop3: detected capacity change from 0 to 1024 [ 96.926049][ T7319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.950933][ T7322] EXT4-fs: Ignoring removed nobh option [ 96.956569][ T7322] EXT4-fs: Ignoring removed orlov option [ 96.979051][ T6992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.002298][ T7322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.044811][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.081526][ T7341] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 97.131854][ T7346] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1375'. [ 97.183594][ T7352] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.1378'. [ 97.220683][ T7356] loop4: detected capacity change from 0 to 1024 [ 97.231177][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.254038][ T6853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.378126][ T7367] loop4: detected capacity change from 0 to 1024 [ 97.385192][ T7367] EXT4-fs: Ignoring removed nobh option [ 97.390828][ T7367] EXT4-fs: Ignoring removed orlov option [ 97.405311][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.437213][ T6853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.584696][ T7388] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 97.870504][ T7397] loop4: detected capacity change from 0 to 1024 [ 97.886833][ T7397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.919438][ T6853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.043903][ T7422] loop0: detected capacity change from 0 to 512 [ 98.051939][ T7422] EXT4-fs: Invalid want_extra_isize 1 [ 98.061580][ T7422] tipc: Started in network mode [ 98.067115][ T7422] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 98.074291][ T7422] tipc: Enabled bearer , priority 10 [ 98.083293][ T7422] tipc: Resetting bearer [ 98.103353][ T7422] tipc: Disabling bearer [ 98.711446][ T7476] loop3: detected capacity change from 0 to 512 [ 98.722938][ T7476] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.730976][ T7476] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 98.739069][ T7476] System zones: 0-1, 15-15, 18-18, 34-34 [ 98.744895][ T7476] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.751260][ T7476] EXT4-fs warning (device loop3): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 98.765789][ T7476] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 98.773424][ T7476] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1427: bg 0: block 40: padding at end of block bitmap is not set [ 98.787711][ T7476] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 98.796611][ T7476] EXT4-fs (loop3): 1 truncate cleaned up [ 98.802678][ T7476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.818533][ T7476] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1427: corrupted xattr block 19: bad e_name length [ 98.832148][ T7476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 98.841078][ T7476] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1427: corrupted xattr block 19: bad e_name length [ 98.854569][ T7476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 98.863565][ T7476] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1427: corrupted xattr block 19: bad e_name length [ 98.877056][ T7476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 98.894345][ T6755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.911052][ T7480] loop3: detected capacity change from 0 to 256 [ 98.917584][ T7480] vfat: Unknown parameter 'u˙˙˙˙late' [ 99.108169][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.307163][ T7510] loop4: detected capacity change from 0 to 1024 [ 100.313825][ T7510] EXT4-fs: Ignoring removed nobh option [ 100.319410][ T7510] EXT4-fs: Ignoring removed orlov option [ 100.341595][ T7510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.360496][ T6853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.376175][ T7514] ================================================================== [ 100.384242][ T7514] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 100.391339][ T7514] [ 100.393641][ T7514] write to 0xffff88810412a600 of 8 bytes by task 7515 on cpu 0: [ 100.401248][ T7514] exit_mm+0x9c/0x190 [ 100.405213][ T7514] do_exit+0x55e/0x1720 [ 100.409350][ T7514] do_group_exit+0x102/0x150 [ 100.413924][ T7514] get_signal+0xf2f/0x1080 [ 100.418325][ T7514] arch_do_signal_or_restart+0x95/0x4b0 [ 100.423856][ T7514] syscall_exit_to_user_mode+0x59/0x130 [ 100.429385][ T7514] do_syscall_64+0xd6/0x1c0 [ 100.433878][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.439760][ T7514] [ 100.442066][ T7514] read to 0xffff88810412a600 of 8 bytes by task 7514 on cpu 1: [ 100.449586][ T7514] mm_update_next_owner+0x1c9/0x460 [ 100.454790][ T7514] exit_mm+0xdc/0x190 [ 100.458763][ T7514] do_exit+0x55e/0x1720 [ 100.462906][ T7514] do_group_exit+0x142/0x150 [ 100.467502][ T7514] __x64_sys_exit_group+0x1f/0x20 [ 100.472516][ T7514] x64_sys_call+0x2d5d/0x2d60 [ 100.477185][ T7514] do_syscall_64+0xc9/0x1c0 [ 100.481676][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.487553][ T7514] [ 100.489866][ T7514] value changed: 0xffff888112250000 -> 0x0000000000000000 [ 100.496958][ T7514] [ 100.499274][ T7514] Reported by Kernel Concurrency Sanitizer on: [ 100.505408][ T7514] CPU: 1 PID: 7514 Comm: syz.4.1439 Not tainted 6.10.0-syzkaller-02711-g0434dbe32053 #0 [ 100.515111][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.525151][ T7514] ==================================================================