last executing test programs: 18.776075834s ago: executing program 4 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000110005f6"], 0x2c}}, 0x0) 18.754926956s ago: executing program 4 (id=1056): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}, 0x10) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 18.729637858s ago: executing program 4 (id=1057): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f0000000080)=""/255, 0x18) getdents(r0, &(0x7f0000001440)=""/228, 0xe4) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(0xffffffffffffffff, &(0x7f0000000080)=""/255, 0x18) getdents(0xffffffffffffffff, &(0x7f0000001440)=""/228, 0xe4) r1 = socket(0x10, 0x803, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x40, 0x936a}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000014002101feffffff0000000002000000", @ANYRES32=r5, @ANYBLOB="0800020064"], 0x20}}, 0x20040000) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'vlan0\x00'}]}, 0x2c}}, 0x0) (fail_nth: 8) 18.329848561s ago: executing program 4 (id=1060): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x80, 0x1, 0x7}}, 0x14) flock(r1, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x100, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWALK(r2, &(0x7f0000000100)={0x3d, 0x6f, 0x2, {0x4, [{0x4, 0x1, 0x8}, {0x40, 0x1, 0x1}, {0x4, 0x0, 0x8}, {0x4, 0x4, 0x2}]}}, 0x3d) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000180)="9457c4c16fd1c0f4930435d0acae8e4f473c923dc72215b4f500697013b487e59b5058746e595dc23a5e5fcadc406a4a2750f828aacd56bb7e0a4d89290421015eb25cd50fb193635194355c4601c06e89df2a269ef279e8cb17eaedb3bfb368cdeaec40133f4c4877cd2e0c5c5ce23ed67dc1fdad2ed49dfb1e8f5fc74d90d2ae6c9fa54da5df6a8fc27a7df67c749bf2479749a54ed306da4abdd7a0812a9011ee3599cbfdb31fb89eceb5d74bd7ac1c41c8d491c83ae660356590b1a553f60dc54d37783dbe1c65da15") write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7) clock_gettime(0x0, &(0x7f00000047c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000046c0)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000001440)=""/195, 0xc3}, {&(0x7f0000001540)=""/34, 0x22}, {0x0}], 0x5, &(0x7f0000001640)=""/2, 0x2}, 0x7fff}, {{&(0x7f0000001680), 0x80, &(0x7f0000002b40)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/163, 0xa3}, {&(0x7f00000027c0)=""/139, 0x8b}, {&(0x7f0000002880)=""/235, 0xeb}, {&(0x7f0000002980)=""/220, 0xdc}, {&(0x7f0000002a80)=""/190, 0xbe}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x9}, {{&(0x7f0000002c80)=@alg, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002d00)=""/38, 0x26}, {&(0x7f0000002d40)=""/111, 0x6f}, {&(0x7f0000002dc0)=""/195, 0xc3}, {&(0x7f0000002ec0)=""/32, 0x20}, {&(0x7f0000002f00)=""/232, 0xe8}, {&(0x7f0000003000)=""/221, 0xdd}, {&(0x7f0000003100)=""/142, 0x8e}], 0x7, &(0x7f0000003240)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000004240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000042c0)=""/14, 0xe}, {&(0x7f0000004300)=""/126, 0x7e}, {&(0x7f0000004380)=""/121, 0x79}, {&(0x7f0000004400)=""/89, 0x59}, {&(0x7f0000004480)=""/149, 0x95}], 0x5, &(0x7f00000045c0)=""/241, 0xf1}, 0x3ff}], 0x4, 0x40000040, &(0x7f0000004800)={r5, r6+60000000}) r7 = gettid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000004840)=0x1, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004880)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000048c0)={0x0, 0x6, 0x4}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x20010, r9, 0xc4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000004900)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004a40)={@map, 0xc, 0x0, 0x8, &(0x7f0000004940)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000049c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a00)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004a80)={@map=r10, r1, 0x1a, 0x25, r9, @prog_fd=r1, r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004ac0)=@base={0x17, 0x8, 0x0, 0x8, 0x304c, 0x1, 0x7, '\x00', 0x0, r4, 0x1, 0x3, 0x3}, 0x48) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f0000004b40)) r12 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000004b80)={0x2000}) r13 = syz_pidfd_open(r7, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r8, &(0x7f0000004bc0)={r9, r13, 0x6b74}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000004c00)={0x0, 0x92, "a4da16dcb22a994de09e2b3330ab0c06f631db3c977fbf98cff89b9e3a25696a173e7e552c9dac2345ad27ba119a96ea53211cbe5c538166b55010d84b930be564b046ae60ce0642d561d60414e25e3cbcb67ad5cd7c4bb9ad2805d16db567109ae0779b73efc4c1a14b9e74531acf182101796206449715dd13b9a92f9ee5d0db429c0350a7a814c4e78ffdd13da23e0a08"}, &(0x7f0000004cc0)=0x9a) 18.3293002s ago: executing program 4 (id=1061): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000280), 0x45, 0x779, &(0x7f00000007c0)="$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") r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x10, r1, 0x29c3b000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff000, 0x28f}, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000006c0)) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0xa, "a5ed82b3c7aa4a4d33bd7649060349f733f5e9"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) fallocate(r6, 0x10, 0x2000000, 0x2c2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000080)) 17.291038276s ago: executing program 3 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400efffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) 17.122857449s ago: executing program 3 (id=1069): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000071468f000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x0, 0x8, 0x1}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 17.11665597s ago: executing program 3 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) pipe2(&(0x7f00000002c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a4000ddffff0800020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001fd000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x1670e68) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 16.896742888s ago: executing program 3 (id=1071): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x80, 0x1, 0x7}}, 0x14) flock(r1, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x100, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWALK(r2, &(0x7f0000000100)={0x3d, 0x6f, 0x2, {0x4, [{0x4, 0x1, 0x8}, {0x40, 0x1, 0x1}, {0x4, 0x0, 0x8}, {0x4, 0x4, 0x2}]}}, 0x3d) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000180)="9457c4c16fd1c0f4930435d0acae8e4f473c923dc72215b4f500697013b487e59b5058746e595dc23a5e5fcadc406a4a2750f828aacd56bb7e0a4d89290421015eb25cd50fb193635194355c4601c06e89df2a269ef279e8cb17eaedb3bfb368cdeaec40133f4c4877cd2e0c5c5ce23ed67dc1fdad2ed49dfb1e8f5fc74d90d2ae6c9fa54da5df6a8fc27a7df67c749bf2479749a54ed306da4abdd7a0812a9011ee3599cbfdb31fb89eceb5d74bd7ac1c41c8d491c83ae660356590b1a553f60dc54d37783dbe1c65da15") write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7) clock_gettime(0x0, &(0x7f00000047c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000046c0)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000001440)=""/195, 0xc3}, {&(0x7f0000001580)}], 0x4, &(0x7f0000001640)=""/2, 0x2}, 0x7fff}, {{&(0x7f0000001680), 0x80, &(0x7f0000002b40)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/163, 0xa3}, {&(0x7f00000027c0)=""/139, 0x8b}, {&(0x7f0000002880)=""/235, 0xeb}, {&(0x7f0000002980)=""/220, 0xdc}, {&(0x7f0000002a80)=""/190, 0xbe}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x9}, {{&(0x7f0000002c80)=@alg, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002d00)=""/38, 0x26}, {&(0x7f0000002d40)=""/111, 0x6f}, {&(0x7f0000002dc0)=""/195, 0xc3}, {&(0x7f0000002ec0)=""/32, 0x20}, {&(0x7f0000002f00)=""/232, 0xe8}, {&(0x7f0000003000)=""/221, 0xdd}, {&(0x7f0000003100)=""/142, 0x8e}], 0x7, &(0x7f0000003240)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000004240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000042c0)=""/14, 0xe}, {&(0x7f0000004300)=""/126, 0x7e}, {&(0x7f0000004380)=""/121, 0x79}, {&(0x7f0000004400)=""/89, 0x59}, {&(0x7f0000004480)=""/149, 0x95}], 0x5, &(0x7f00000045c0)=""/241, 0xf1}, 0x3ff}], 0x4, 0x40000040, &(0x7f0000004800)={r5, r6+60000000}) r7 = gettid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000004840)=0x1, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004880)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000048c0)={0x0, 0x6, 0x4}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x20010, r9, 0xc4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000004900)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004a40)={@map, 0xc, 0x0, 0x8, &(0x7f0000004940)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000049c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a00)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004a80)={@map=r10, r1, 0x1a, 0x25, r9, @prog_fd=r1, r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004ac0)=@base={0x17, 0x8, 0x0, 0x8, 0x304c, 0x1, 0x7, '\x00', 0x0, r4, 0x1, 0x3, 0x3}, 0x48) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f0000004b40)) r12 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000004b80)={0x2000}) r13 = syz_pidfd_open(r7, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r8, &(0x7f0000004bc0)={r9, r13, 0x6b74}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000004c00)={0x0, 0x92, "a4da16dcb22a994de09e2b3330ab0c06f631db3c977fbf98cff89b9e3a25696a173e7e552c9dac2345ad27ba119a96ea53211cbe5c538166b55010d84b930be564b046ae60ce0642d561d60414e25e3cbcb67ad5cd7c4bb9ad2805d16db567109ae0779b73efc4c1a14b9e74531acf182101796206449715dd13b9a92f9ee5d0db429c0350a7a814c4e78ffdd13da23e0a08"}, &(0x7f0000004cc0)=0x9a) 16.832636953s ago: executing program 3 (id=1072): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5800000002060300000000fffffff0000000000011000300686173683a69702c6d61726b00000000050004000000000005000500020000000900020073797a320000000005000100070000000c00078008001240"], 0x58}}, 0x0) 16.25394669s ago: executing program 0 (id=1078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x98, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0xe8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x4}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_xfrm(r5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) fcntl$addseals(r0, 0x409, 0xa) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r6, &(0x7f0000000400)={0x8000, 0x37c}) r7 = accept(r2, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000000), 0x84880) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 16.116509322s ago: executing program 0 (id=1079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000050100000006000b000a0000000c000100545e7d2521239c00080002"], 0x58}}, 0x0) 16.01510335s ago: executing program 0 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@data_ordered}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r3, r3], 0x2}, 0x58) 15.89551274s ago: executing program 0 (id=1081): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'macvlan0\x00', @random="9315f06e0100"}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001880)='./file0\x00', 0xe, &(0x7f0000000480)={[{@data_err_ignore}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@debug}, {@jqfmt_vfsv0}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x3, 0x445, &(0x7f0000000900)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r3 = io_uring_setup(0x734a, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/54, 0x36}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) 15.747242132s ago: executing program 0 (id=1082): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x80, 0x1, 0x7}}, 0x14) flock(r1, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x100, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWALK(r2, &(0x7f0000000100)={0x3d, 0x6f, 0x2, {0x4, [{0x4, 0x1, 0x8}, {0x40, 0x1, 0x1}, {0x4, 0x0, 0x8}, {0x4, 0x4, 0x2}]}}, 0x3d) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000180)="9457c4c16fd1c0f4930435d0acae8e4f473c923dc72215b4f500697013b487e59b5058746e595dc23a5e5fcadc406a4a2750f828aacd56bb7e0a4d89290421015eb25cd50fb193635194355c4601c06e89df2a269ef279e8cb17eaedb3bfb368cdeaec40133f4c4877cd2e0c5c5ce23ed67dc1fdad2ed49dfb1e8f5fc74d90d2ae6c9fa54da5df6a8fc27a7df67c749bf2479749a54ed306da4abdd7a0812a9011ee3599cbfdb31fb89eceb5d74bd7ac1c41c8d491c83ae660356590b1a553f60dc54d37783dbe1c65da15") write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7) clock_gettime(0x0, &(0x7f00000047c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000046c0)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000001440)=""/195, 0xc3}, {&(0x7f0000001580)}], 0x4, &(0x7f0000001640)=""/2, 0x2}, 0x7fff}, {{&(0x7f0000001680), 0x80, &(0x7f0000002b40)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/163, 0xa3}, {&(0x7f00000027c0)=""/139, 0x8b}, {&(0x7f0000002880)=""/235, 0xeb}, {&(0x7f0000002980)=""/220, 0xdc}, {&(0x7f0000002a80)=""/190, 0xbe}], 0x6, &(0x7f0000002bc0)=""/145, 0x91}, 0x9}, {{&(0x7f0000002c80)=@alg, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002d00)=""/38, 0x26}, {&(0x7f0000002d40)=""/111, 0x6f}, {&(0x7f0000002dc0)=""/195, 0xc3}, {&(0x7f0000002ec0)=""/32, 0x20}, {&(0x7f0000002f00)=""/232, 0xe8}, {&(0x7f0000003000)=""/221, 0xdd}, {&(0x7f0000003100)=""/142, 0x8e}], 0x7, &(0x7f0000003240)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000004240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000042c0)=""/14, 0xe}, {&(0x7f0000004300)=""/126, 0x7e}, {&(0x7f0000004380)=""/121, 0x79}, {&(0x7f0000004400)=""/89, 0x59}, {&(0x7f0000004480)=""/149, 0x95}], 0x5, &(0x7f00000045c0)=""/241, 0xf1}, 0x3ff}], 0x4, 0x40000040, &(0x7f0000004800)={r5, r6+60000000}) r7 = gettid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000004840)=0x1, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004880)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000048c0)={0x0, 0x6, 0x4}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x20010, r9, 0xc4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000004900)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004a40)={@map, 0xc, 0x0, 0x8, &(0x7f0000004940)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000049c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a00)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004a80)={@map=r10, r1, 0x1a, 0x25, r9, @prog_fd=r1, r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004ac0)=@base={0x17, 0x8, 0x0, 0x8, 0x304c, 0x1, 0x7, '\x00', 0x0, r4, 0x1, 0x3, 0x3}, 0x48) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f0000004b40)) r12 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000004b80)={0x2000}) r13 = syz_pidfd_open(r7, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r8, &(0x7f0000004bc0)={r9, r13, 0x6b74}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000004c00)={0x0, 0x92, "a4da16dcb22a994de09e2b3330ab0c06f631db3c977fbf98cff89b9e3a25696a173e7e552c9dac2345ad27ba119a96ea53211cbe5c538166b55010d84b930be564b046ae60ce0642d561d60414e25e3cbcb67ad5cd7c4bb9ad2805d16db567109ae0779b73efc4c1a14b9e74531acf182101796206449715dd13b9a92f9ee5d0db429c0350a7a814c4e78ffdd13da23e0a08"}, &(0x7f0000004cc0)=0x9a) 15.638818351s ago: executing program 0 (id=1083): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a5000000230000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 10.079055866s ago: executing program 1 (id=1099): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000140, 0x0, 0x0, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"]}, 0x108) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000000000000000050016000000000008001700b45ac5"], 0x2c}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x3, 0x2, {0xa, 0x4e22, 0x5, @loopback, 0xfffffff0}}}, 0x32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpgid(0x0) io_uring_setup(0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 9.285330901s ago: executing program 1 (id=1100): bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x2c}}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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") fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x2) sched_setscheduler(r1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$netlink(0x10, 0x3, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x227d, 0xfffffffffffffffe) socket(0x10, 0x2, 0x9) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x20048044) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.43995264s ago: executing program 1 (id=1101): creat(0x0, 0x0) creat(0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x7000000, 0x0, 0x0, 0x0, 0xd, 0xf401}, 0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 7.557882442s ago: executing program 1 (id=1103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x5, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000d00)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@bsdgroups}, {@nombcache}, {@noload}]}, 0x3, 0x43f, &(0x7f0000000280)="$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") chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x26e1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000200)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 7.33820671s ago: executing program 1 (id=1105): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x4, 0x3, 0x5, 0x1442, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sched_setscheduler(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) set_mempolicy(0x2002, &(0x7f0000000400)=0x7, 0x5) write$cgroup_pid(r6, &(0x7f0000000440), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x22000406, &(0x7f0000000700)={[{@stripe={'stripe', 0x3d, 0x3}}, {@debug}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@discard}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r7 = fcntl$getown(r0, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640)={0x2, r7}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) 6.257673218s ago: executing program 1 (id=1107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x88, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x74, 0x1, [@m_sample={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3ff, 0x6, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x88}}, 0x20000810) 954.201352ms ago: executing program 2 (id=1112): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e, 0x0, 0x0, 0xfffff}, 0x20) 871.177019ms ago: executing program 2 (id=1113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0), 0x0) 635.736529ms ago: executing program 2 (id=1114): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x4, 0x3, 0x5, 0x1442, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sched_setscheduler(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) set_mempolicy(0x2002, &(0x7f0000000400)=0x7, 0x5) write$cgroup_pid(r6, &(0x7f0000000440), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x22000406, &(0x7f0000000700)={[{@stripe={'stripe', 0x3d, 0x3}}, {@debug}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@errors_remount}, {@jqfmt_vfsv1}, {@discard}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r7 = fcntl$getown(r0, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640)={0x2, r7}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) 515.870198ms ago: executing program 4 (id=1104): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async, rerun: 64) r5 = signalfd4(r4, &(0x7f0000000200)={[0xfffffffffffffff3]}, 0x8, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef35"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 463.419163ms ago: executing program 2 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0xa888}, 0x0) 463.150582ms ago: executing program 2 (id=1116): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 423.353626ms ago: executing program 2 (id=1117): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b389490832"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000000c0)=""/123, &(0x7f0000000140)=0x7b) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@empty, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0xffe}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "ea10e19caeb9e69e"}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x2a, 0x0, 0x1}, 0x20) 0s ago: executing program 3 (id=1106): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0xfea7) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003, 0x0, 0x1f00}) kernel console output (not intermixed with test programs): 78885][ T1565] bridge_slave_1: left allmulticast mode [ 127.784508][ T1565] bridge_slave_1: left promiscuous mode [ 127.790193][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.798092][ T1565] bridge_slave_0: left allmulticast mode [ 127.803800][ T1565] bridge_slave_0: left promiscuous mode [ 127.809485][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.079641][ T1565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.089966][ T1565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.099867][ T1565] bond0 (unregistering): Released all slaves [ 128.108882][ T1565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.119157][ T1565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.129176][ T1565] bond0 (unregistering): Released all slaves [ 128.138562][ T1565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.148876][ T1565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.158938][ T1565] bond0 (unregistering): Released all slaves [ 128.232510][ T6668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.245382][ T6668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.255902][ T6668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.268974][ T6668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.279497][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.297118][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.309950][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.317019][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.343616][ T1565] hsr_slave_0: left promiscuous mode [ 128.349307][ T1565] hsr_slave_1: left promiscuous mode [ 128.354933][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.362434][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.370238][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.377594][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.386644][ T1565] hsr_slave_0: left promiscuous mode [ 128.392279][ T1565] hsr_slave_1: left promiscuous mode [ 128.397973][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.405429][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.412865][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.420336][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.429287][ T1565] hsr_slave_0: left promiscuous mode [ 128.434927][ T1565] hsr_slave_1: left promiscuous mode [ 128.440604][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.448136][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.455914][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.463321][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.474103][ T1565] veth1_macvtap: left promiscuous mode [ 128.479625][ T1565] veth0_macvtap: left promiscuous mode [ 128.485120][ T1565] veth1_vlan: left promiscuous mode [ 128.490399][ T1565] veth0_vlan: left promiscuous mode [ 128.496076][ T1565] veth1_macvtap: left promiscuous mode [ 128.501545][ T1565] veth0_macvtap: left promiscuous mode [ 128.507055][ T1565] veth1_vlan: left promiscuous mode [ 128.512345][ T1565] veth0_vlan: left promiscuous mode [ 128.518197][ T1565] veth1_macvtap: left promiscuous mode [ 128.523730][ T1565] veth0_macvtap: left promiscuous mode [ 128.529229][ T1565] veth1_vlan: left promiscuous mode [ 128.534414][ T1565] veth0_vlan: left promiscuous mode [ 128.679199][ T1565] team0 (unregistering): Port device team_slave_1 removed [ 128.688830][ T1565] team0 (unregistering): Port device team_slave_0 removed [ 128.744444][ T1565] team0 (unregistering): Port device team_slave_1 removed [ 128.754536][ T1565] team0 (unregistering): Port device team_slave_0 removed [ 128.807958][ T1565] team0 (unregistering): Port device team_slave_1 removed [ 128.817185][ T1565] team0 (unregistering): Port device team_slave_0 removed [ 128.853976][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.861061][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.871354][ T6730] chnl_net:caif_netlink_parms(): no params data found [ 128.918491][ T6669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.937314][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.944582][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.952000][ T6730] bridge_slave_0: entered allmulticast mode [ 128.958872][ T6730] bridge_slave_0: entered promiscuous mode [ 128.965682][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.972926][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.980362][ T6730] bridge_slave_1: entered allmulticast mode [ 128.986623][ T6730] bridge_slave_1: entered promiscuous mode [ 129.010736][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.030848][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.041888][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.060853][ T6730] team0: Port device team_slave_0 added [ 129.069512][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.078891][ T6730] team0: Port device team_slave_1 added [ 129.092871][ T6668] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.129339][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.136307][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.162412][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.173981][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.181037][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.192227][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.199302][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.209920][ T6698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.221549][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.228549][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.254529][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.271178][ T6698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.279986][ T6698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.288896][ T6698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.319206][ T6730] hsr_slave_0: entered promiscuous mode [ 129.325293][ T6730] hsr_slave_1: entered promiscuous mode [ 129.367801][ T6669] veth0_vlan: entered promiscuous mode [ 129.394927][ T6669] veth1_vlan: entered promiscuous mode [ 129.422917][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.434562][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.446477][ T6669] veth0_macvtap: entered promiscuous mode [ 129.455874][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.463006][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.473184][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.480248][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.496918][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.508768][ T6669] veth1_macvtap: entered promiscuous mode [ 129.529614][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.540178][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.551205][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.565458][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.575983][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.586672][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.605322][ T6669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.614053][ T6669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.622788][ T6669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.631677][ T6669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.662907][ T29] audit: type=1400 audit(1721667855.208:688): avc: denied { mounton } for pid=6669 comm="syz-executor" path="/root/syzkaller.1vXQh1/syz-tmp" dev="sda1" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 129.677491][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.698743][ T6668] veth0_vlan: entered promiscuous mode [ 129.706940][ T6668] veth1_vlan: entered promiscuous mode [ 129.712546][ T29] audit: type=1400 audit(1721667855.248:689): avc: denied { mount } for pid=6669 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.734656][ T29] audit: type=1400 audit(1721667855.248:690): avc: denied { mount } for pid=6669 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 129.743092][ T6700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.763304][ T29] audit: type=1400 audit(1721667855.258:691): avc: denied { mounton } for pid=6669 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 129.801318][ T6730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.802388][ T6775] loop1: detected capacity change from 0 to 512 [ 129.818725][ T6775] journal_path: Lookup failure for './file0' [ 129.824702][ T6775] EXT4-fs: error: could not find journal device path [ 129.826655][ T6700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.844633][ T6700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.853555][ T6700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.867075][ T6730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.887198][ T6668] veth0_macvtap: entered promiscuous mode [ 129.908593][ T6668] veth1_macvtap: entered promiscuous mode [ 129.931272][ T6730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.944152][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.954616][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.964431][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.974934][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.985645][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.041726][ T6698] veth0_vlan: entered promiscuous mode [ 130.047842][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.058388][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.068198][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.078692][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.089412][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.101408][ T6730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.130139][ T6668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.138987][ T6668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.147772][ T6668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.156463][ T6668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.173925][ T6698] veth1_vlan: entered promiscuous mode [ 130.207202][ T6698] veth0_macvtap: entered promiscuous mode [ 130.221319][ T6787] loop1: detected capacity change from 0 to 1024 [ 130.229077][ T6787] ext4: Unknown parameter 'smackfsroot' [ 130.244877][ T6730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.256248][ T29] audit: type=1400 audit(1721667855.798:692): avc: denied { connect } for pid=6789 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.275842][ T29] audit: type=1400 audit(1721667855.798:693): avc: denied { name_connect } for pid=6789 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 130.296729][ T29] audit: type=1400 audit(1721667855.798:694): avc: denied { listen } for pid=6789 comm="syz.0.913" lport=59296 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.299953][ T6698] veth1_macvtap: entered promiscuous mode [ 130.319241][ T29] audit: type=1400 audit(1721667855.798:695): avc: denied { accept } for pid=6789 comm="syz.0.913" lport=59296 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.328669][ T6794] loop0: detected capacity change from 0 to 512 [ 130.347136][ T29] audit: type=1400 audit(1721667855.798:696): avc: denied { setopt } for pid=6789 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.376936][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.388499][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.397326][ T6730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.404386][ T6794] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.913: corrupted in-inode xattr: invalid ea_ino [ 130.419359][ T6794] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.913: couldn't read orphan inode 15 (err -117) [ 130.433713][ T6730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.440989][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.470205][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.477325][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.486691][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.493771][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.504660][ T29] audit: type=1400 audit(1721667856.048:697): avc: denied { write } for pid=6789 comm="syz.0.913" path=2F302F66696C65302F66696C65302F233138202864656C6574656429 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.534008][ T6668] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.545439][ T6730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.567535][ T1565] bridge_slave_1: left allmulticast mode [ 130.573273][ T1565] bridge_slave_1: left promiscuous mode [ 130.579386][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.590576][ T1565] bridge_slave_0: left allmulticast mode [ 130.596221][ T1565] bridge_slave_0: left promiscuous mode [ 130.601898][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.690738][ T1565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.703344][ T1565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.713995][ T1565] bond0 (unregistering): Released all slaves [ 130.723225][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.733669][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.743496][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.753918][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.763794][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.774280][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.785606][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.802715][ T6700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.813093][ T6700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.842711][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.853222][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.863066][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.873536][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.883384][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.893820][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.906310][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.914854][ T6698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.923636][ T6698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.932361][ T6698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.941141][ T6698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.962546][ T1565] hsr_slave_0: left promiscuous mode [ 130.968506][ T1565] hsr_slave_1: left promiscuous mode [ 130.974413][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.981848][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.992821][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.000278][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.009790][ T1565] veth1_macvtap: left promiscuous mode [ 131.015385][ T1565] veth0_macvtap: left promiscuous mode [ 131.020998][ T1565] veth1_vlan: left promiscuous mode [ 131.026235][ T1565] veth0_vlan: left promiscuous mode [ 131.114969][ T1565] team0 (unregistering): Port device team_slave_1 removed [ 131.126914][ T1565] team0 (unregistering): Port device team_slave_0 removed [ 131.193831][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.257114][ T6730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.282160][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.309495][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.316628][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.351404][ T6819] loop2: detected capacity change from 0 to 512 [ 131.363822][ T6819] journal_path: Lookup failure for './file0' [ 131.369095][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.369977][ T6819] EXT4-fs: error: could not find journal device path [ 131.376851][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.386489][ T6730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.401693][ T6730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.481354][ T6700] veth0_vlan: entered promiscuous mode [ 131.498968][ T6700] veth1_vlan: entered promiscuous mode [ 131.543380][ T6838] loop2: detected capacity change from 0 to 1024 [ 131.550380][ T6730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.572482][ T6700] veth0_macvtap: entered promiscuous mode [ 131.581263][ T6838] ext4: Unknown parameter 'smackfsroot' [ 131.591748][ T6700] veth1_macvtap: entered promiscuous mode [ 131.614624][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.625160][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.635050][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.645628][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.655485][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.665970][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.678583][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.701961][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.712460][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.722365][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.732913][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.742851][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.753300][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.765257][ T6842] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 131.772964][ T6842] netlink: 96 bytes leftover after parsing attributes in process `syz.2.931'. [ 131.788540][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.809150][ T6700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.818106][ T6700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.826871][ T6700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.835780][ T6700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.848470][ T6842] SELinux: policydb version -2122716282 does not match my version range 15-33 [ 131.861502][ T6842] SELinux: failed to load policy [ 131.891577][ T6842] loop2: detected capacity change from 0 to 528 [ 131.918526][ T6842] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 131.924924][ T6730] veth0_vlan: entered promiscuous mode [ 131.939724][ T6730] veth1_vlan: entered promiscuous mode [ 131.975913][ T6730] veth0_macvtap: entered promiscuous mode [ 131.989384][ T6730] veth1_macvtap: entered promiscuous mode [ 132.019899][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.030437][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.040415][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.050969][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.060899][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.071491][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.081438][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.091878][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.105276][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.113667][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.118358][ T6866] loop2: detected capacity change from 0 to 512 [ 132.124109][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.124120][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.124132][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.124147][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.148344][ T6866] EXT4-fs: Ignoring removed oldalloc option [ 132.150614][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.186521][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.197044][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.211322][ T6866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.223163][ T6866] EXT4-fs (loop2): 1 truncate cleaned up [ 132.229182][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.250846][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.265161][ T6730] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.274150][ T6730] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.282976][ T6730] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.291777][ T6730] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.353072][ T6698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.366467][ T6873] loop4: detected capacity change from 0 to 512 [ 132.392481][ T6876] loop2: detected capacity change from 0 to 1024 [ 132.393610][ T6873] journal_path: Lookup failure for './file0' [ 132.404924][ T6873] EXT4-fs: error: could not find journal device path [ 132.412285][ T6876] ext4: Unknown parameter 'smackfsroot' [ 132.582399][ T6893] loop4: detected capacity change from 0 to 512 [ 132.590037][ T6893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002] [ 132.598487][ T6893] System zones: 1-12 [ 132.602951][ T6893] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.946: Attempting to read directory block (0) that is past i_size (256) [ 132.624192][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 132.631284][ T6893] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 132.640468][ T6893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.654740][ T6893] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 132.663031][ T6893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.723083][ T6913] loop3: detected capacity change from 0 to 1024 [ 132.732605][ T6913] ext4: Unknown parameter 'smackfsroot' [ 132.773995][ T6923] loop4: detected capacity change from 0 to 512 [ 132.781899][ T6923] journal_path: Lookup failure for './file0' [ 132.787917][ T6923] EXT4-fs: error: could not find journal device path [ 132.896040][ T6947] loop3: detected capacity change from 0 to 256 [ 132.908676][ T6947] vfat: Unknown parameter 'Åq' [ 132.968412][ T6950] netlink: 44 bytes leftover after parsing attributes in process `syz.4.960'. [ 133.120735][ T6969] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.131657][ T6969] vhci_hcd: invalid port number 38 [ 133.133809][ T6940] chnl_net:caif_netlink_parms(): no params data found [ 133.136790][ T6969] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 133.206625][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.213871][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.226381][ T6982] loop2: detected capacity change from 0 to 1024 [ 133.240095][ T6977] loop3: detected capacity change from 0 to 512 [ 133.246616][ T6977] journal_path: Lookup failure for './file0' [ 133.252644][ T6977] EXT4-fs: error: could not find journal device path [ 133.266827][ T6940] bridge_slave_0: entered allmulticast mode [ 133.279757][ T6940] bridge_slave_0: entered promiscuous mode [ 133.308231][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.315308][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.351250][ T6940] bridge_slave_1: entered allmulticast mode [ 133.366993][ T6940] bridge_slave_1: entered promiscuous mode [ 133.382334][ T6990] team0: Device ipvlan2 is already an upper device of the team interface [ 133.428879][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.475912][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.500125][ T6940] team0: Port device team_slave_0 added [ 133.514148][ T6940] team0: Port device team_slave_1 added [ 133.538988][ C1] eth0: bad gso: type: 1, size: 1408 [ 133.549161][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.556195][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.582187][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.607132][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.614107][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.640051][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.662432][ T7002] loop2: detected capacity change from 0 to 512 [ 133.685305][ T6940] hsr_slave_0: entered promiscuous mode [ 133.693062][ T7002] EXT4-fs: Ignoring removed orlov option [ 133.700051][ T6940] hsr_slave_1: entered promiscuous mode [ 133.713453][ T6940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.722305][ T6940] Cannot create hsr debugfs directory [ 133.729455][ T7002] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.981: Failed to acquire dquot type 1 [ 133.742418][ T7002] EXT4-fs (loop2): 1 truncate cleaned up [ 133.748746][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.777672][ T7002] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.851169][ T6698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.886953][ T7012] loop3: detected capacity change from 0 to 512 [ 133.900434][ T6940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.912367][ T7012] journal_path: Lookup failure for './file0' [ 133.918429][ T7012] EXT4-fs: error: could not find journal device path [ 133.994030][ T7024] loop2: detected capacity change from 0 to 1024 [ 134.002595][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.051819][ T6698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.053743][ T7031] loop3: detected capacity change from 0 to 128 [ 134.075229][ T7031] netlink: 'syz.3.993': attribute type 21 has an invalid length. [ 134.142497][ T7042] loop2: detected capacity change from 0 to 128 [ 134.155247][ T7043] loop3: detected capacity change from 0 to 512 [ 134.163110][ T7043] journal_path: Lookup failure for './file0' [ 134.169145][ T7043] EXT4-fs: error: could not find journal device path [ 134.176893][ T7042] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.190529][ T7042] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.256826][ T6698] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.316796][ T7055] loop2: detected capacity change from 0 to 256 [ 134.329839][ T7050] loop3: detected capacity change from 0 to 1024 [ 134.336517][ T7050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.343519][ T7055] vfat: Unknown parameter 'cohortname' [ 134.351508][ T7050] ext3: Unknown parameter 'euid<00000000000000060928' [ 134.423109][ T7070] loop2: detected capacity change from 0 to 128 [ 134.433288][ T7070] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 134.447100][ T7070] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 134.487408][ T7076] tipc: Enabling of bearer rejected, failed to enable media [ 134.528758][ T7078] loop3: detected capacity change from 0 to 512 [ 134.535483][ T7078] journal_path: Lookup failure for './file0' [ 134.541649][ T7078] EXT4-fs: error: could not find journal device path [ 134.585456][ T7084] loop2: detected capacity change from 0 to 128 [ 134.594965][ T7084] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.607707][ T7084] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.674752][ T6698] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.728648][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 134.728661][ T29] audit: type=1400 audit(1721667860.278:760): avc: denied { write } for pid=6805 comm="kworker/1:8" path="socket:[27821]" dev="sockfs" ino=27821 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.765352][ T29] audit: type=1400 audit(1721667860.308:761): avc: denied { create } for pid=7099 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 134.821860][ T6940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.839639][ T7110] FAULT_INJECTION: forcing a failure. [ 134.839639][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 134.852300][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.3.1022 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 134.862635][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 134.862636][ T7108] loop2: detected capacity change from 0 to 512 [ 134.862841][ T7108] EXT4-fs: Ignoring removed orlov option [ 134.872674][ T7110] Call Trace: [ 134.888264][ T7110] [ 134.891190][ T7110] dump_stack_lvl+0xf2/0x150 [ 134.895788][ T7110] dump_stack+0x15/0x20 [ 134.899974][ T7110] should_fail_ex+0x229/0x230 [ 134.904646][ T7110] ? __alloc_skb+0x10b/0x310 [ 134.909227][ T7110] should_failslab+0x8f/0xb0 [ 134.913811][ T7110] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 134.919620][ T7110] ? fib6_node_lookup+0xaa/0xf0 [ 134.924529][ T7110] __alloc_skb+0x10b/0x310 [ 134.928937][ T7110] alloc_skb_with_frags+0x7f/0x400 [ 134.934112][ T7110] ? ipv6_addr_label+0x1b6/0x270 [ 134.939041][ T7110] sock_alloc_send_pskb+0x435/0x4f0 [ 134.944297][ T7110] ? ipv6_get_saddr_eval+0x7a8/0x7d0 [ 134.949644][ T7110] __ip6_append_data+0x1773/0x2160 [ 134.954828][ T7110] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.960361][ T7110] ? __rcu_read_unlock+0x4e/0x70 [ 134.965344][ T7110] ? __rcu_read_unlock+0x4e/0x70 [ 134.970272][ T7110] ? ip6_mtu+0xfb/0x120 [ 134.974577][ T7110] ? __pfx_ip6_mtu+0x10/0x10 [ 134.979153][ T7110] ip6_append_data+0x1bc/0x260 [ 134.983907][ T7110] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.989478][ T7110] l2tp_ip6_sendmsg+0xb8e/0xcd0 [ 134.994397][ T7110] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 134.999756][ T7110] inet_sendmsg+0xc5/0xd0 [ 135.004075][ T7110] __sock_sendmsg+0x102/0x180 [ 135.008738][ T7110] ____sys_sendmsg+0x312/0x410 [ 135.013495][ T7110] __sys_sendmmsg+0x269/0x500 [ 135.018173][ T7110] __x64_sys_sendmmsg+0x57/0x70 [ 135.023057][ T7110] x64_sys_call+0x2b4e/0x2e00 [ 135.027771][ T7110] do_syscall_64+0xc9/0x1c0 [ 135.032338][ T7110] ? clear_bhb_loop+0x55/0xb0 [ 135.037001][ T7110] ? clear_bhb_loop+0x55/0xb0 [ 135.041661][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.047650][ T7110] RIP: 0033:0x7fb959125e99 [ 135.052060][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.071707][ T7110] RSP: 002b:00007fb9583a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 135.080162][ T7110] RAX: ffffffffffffffda RBX: 00007fb9592b5f60 RCX: 00007fb959125e99 [ 135.088128][ T7110] RDX: 0000000000000001 RSI: 0000000020000e40 RDI: 0000000000000003 [ 135.096098][ T7110] RBP: 00007fb9583a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.104059][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.112081][ T7110] R13: 000000000000000b R14: 00007fb9592b5f60 R15: 00007ffe56fdb0d8 [ 135.120114][ T7110] [ 135.125655][ T29] audit: type=1400 audit(1721667860.408:762): avc: denied { map } for pid=7107 comm="syz.2.1021" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.156085][ T7108] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 135.166151][ T7108] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 135.176331][ T7108] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1021: Failed to acquire dquot type 1 [ 135.191813][ T6940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.191945][ T7114] loop3: detected capacity change from 0 to 512 [ 135.209292][ T7108] EXT4-fs (loop2): 1 truncate cleaned up [ 135.215379][ T7114] EXT4-fs: Ignoring removed oldalloc option [ 135.221770][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.235519][ T7108] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.247361][ T7114] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1023: Parent and EA inode have the same ino 15 [ 135.272021][ T6940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.282644][ T7114] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1023: Parent and EA inode have the same ino 15 [ 135.296814][ T6698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.312544][ T7114] EXT4-fs (loop3): 1 orphan inode deleted [ 135.323751][ T7117] loop2: detected capacity change from 0 to 512 [ 135.330543][ T7114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.344212][ T7117] journal_path: Lookup failure for './file0' [ 135.350307][ T7117] EXT4-fs: error: could not find journal device path [ 135.357642][ T6940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.367377][ T56] bridge_slave_1: left allmulticast mode [ 135.373103][ T56] bridge_slave_1: left promiscuous mode [ 135.378818][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.386226][ T29] audit: type=1400 audit(1721667860.928:763): avc: denied { write } for pid=7113 comm="syz.3.1023" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.408373][ T29] audit: type=1400 audit(1721667860.928:764): avc: denied { open } for pid=7113 comm="syz.3.1023" path="/39/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.503954][ T56] bridge_slave_0: left allmulticast mode [ 135.509722][ T56] bridge_slave_0: left promiscuous mode [ 135.515469][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.761870][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.773662][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.800910][ T56] bond0 (unregistering): Released all slaves [ 135.819903][ T6940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.845886][ T6940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.877700][ T6940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.927195][ T56] hsr_slave_0: left promiscuous mode [ 135.934810][ T56] hsr_slave_1: left promiscuous mode [ 135.949811][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.957234][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.969975][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.977393][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.001937][ T56] veth1_macvtap: left promiscuous mode [ 136.007453][ T56] veth0_macvtap: left promiscuous mode [ 136.012957][ T56] veth1_vlan: left promiscuous mode [ 136.018265][ T56] veth0_vlan: left promiscuous mode [ 136.065531][ T7131] No such timeout policy "syz0" [ 136.073707][ T6730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.105587][ T29] audit: type=1400 audit(1721667861.648:765): avc: denied { getopt } for pid=7132 comm="syz.3.1030" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.205493][ T56] team0 (unregistering): Port device team_slave_1 removed [ 136.216559][ T56] team0 (unregistering): Port device team_slave_0 removed [ 136.226025][ T29] audit: type=1400 audit(1721667861.768:766): avc: denied { create } for pid=7132 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 136.280983][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 136.289911][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 136.328160][ T7143] FAULT_INJECTION: forcing a failure. [ 136.328160][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 136.340867][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.3.1031 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 136.346219][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.351188][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 136.351202][ T7143] Call Trace: [ 136.351208][ T7143] [ 136.351214][ T7143] dump_stack_lvl+0xf2/0x150 [ 136.351263][ T7143] dump_stack+0x15/0x20 [ 136.351279][ T7143] should_fail_ex+0x229/0x230 [ 136.351306][ T7143] ? mas_alloc_nodes+0x1d3/0x4a0 [ 136.351327][ T7143] should_failslab+0x8f/0xb0 [ 136.366755][ T7146] loop2: detected capacity change from 0 to 2048 [ 136.367988][ T7143] kmem_cache_alloc_noprof+0x4c/0x290 [ 136.408789][ T7143] mas_alloc_nodes+0x1d3/0x4a0 [ 136.413604][ T7143] mas_preallocate+0x773/0xc30 [ 136.418415][ T7143] __split_vma+0x244/0x690 [ 136.422848][ T7143] vma_modify+0x108/0x1f0 [ 136.427185][ T7143] mbind_range+0x2ab/0x460 [ 136.431595][ T7143] __se_sys_mbind+0x915/0x1160 [ 136.436361][ T7143] __x64_sys_mbind+0x78/0x90 [ 136.440978][ T7143] x64_sys_call+0x13b9/0x2e00 [ 136.445645][ T7143] do_syscall_64+0xc9/0x1c0 [ 136.450192][ T7143] ? clear_bhb_loop+0x55/0xb0 [ 136.454857][ T7143] ? clear_bhb_loop+0x55/0xb0 [ 136.459580][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.465580][ T7143] RIP: 0033:0x7fb959125e99 [ 136.469986][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.489689][ T7143] RSP: 002b:00007fb9583a7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 136.498087][ T7143] RAX: ffffffffffffffda RBX: 00007fb9592b5f60 RCX: 00007fb959125e99 [ 136.506042][ T7143] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 136.513995][ T7143] RBP: 00007fb9583a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.521951][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.529908][ T7143] R13: 000000000000000b R14: 00007fb9592b5f60 R15: 00007ffe56fdb0d8 [ 136.538115][ T7143] [ 136.571370][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.589497][ T7146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.596626][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.608773][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.643273][ T6940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.653731][ T6940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.678851][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.685925][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.730649][ T29] audit: type=1400 audit(1721667862.278:767): avc: denied { mount } for pid=7150 comm="syz.3.1033" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.844171][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 136.882618][ T6940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.940915][ T7155] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.962058][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.969168][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.982061][ T7126] bridge_slave_0: entered allmulticast mode [ 136.988861][ T7126] bridge_slave_0: entered promiscuous mode [ 136.998677][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 137.011153][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 137.011153][ T50] [ 137.021008][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 137.027029][ T50] EXT4-fs (loop2): Free/Dirty block details [ 137.033218][ T50] EXT4-fs (loop2): free_blocks=2415919104 [ 137.039034][ T50] EXT4-fs (loop2): dirty_blocks=8192 [ 137.044316][ T50] EXT4-fs (loop2): Block reservation details [ 137.050342][ T50] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 137.057580][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.073311][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 137.087930][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.095014][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.113686][ T7126] bridge_slave_1: entered allmulticast mode [ 137.128225][ T7126] bridge_slave_1: entered promiscuous mode [ 137.145754][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.185416][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.199080][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.214842][ T6940] veth0_vlan: entered promiscuous mode [ 137.231601][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.270110][ T6940] veth1_vlan: entered promiscuous mode [ 137.277461][ T7126] team0: Port device team_slave_0 added [ 137.289175][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.311058][ T7126] team0: Port device team_slave_1 added [ 137.338290][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.345260][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.371210][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.416933][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.423996][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.450033][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.544431][ T6940] veth0_macvtap: entered promiscuous mode [ 137.560486][ T7126] hsr_slave_0: entered promiscuous mode [ 137.566476][ T7126] hsr_slave_1: entered promiscuous mode [ 137.584315][ T7126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.603772][ T7126] Cannot create hsr debugfs directory [ 137.612006][ T6940] veth1_macvtap: entered promiscuous mode [ 137.640126][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.650636][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.660563][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.671000][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.680844][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.691830][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.701750][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.712315][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.724321][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.765010][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.775507][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.785450][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.795983][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.805807][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.816299][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.826125][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.836574][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.886254][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.909700][ T56] bridge_slave_1: left allmulticast mode [ 137.915419][ T56] bridge_slave_1: left promiscuous mode [ 137.921115][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.942495][ T56] bridge_slave_0: left allmulticast mode [ 137.948228][ T56] bridge_slave_0: left promiscuous mode [ 137.953901][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.954147][ T7184] loop3: detected capacity change from 0 to 1024 [ 137.978163][ T7184] EXT4-fs: Ignoring removed i_version option [ 137.998852][ T7184] EXT4-fs (loop3): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 138.030699][ T7184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.077897][ T6730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.091232][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.108729][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.130272][ T56] bond0 (unregistering): Released all slaves [ 138.154340][ T7189] loop3: detected capacity change from 0 to 512 [ 138.168513][ T6940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.177257][ T6940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.186058][ T6940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.194772][ T6940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.205348][ T7189] journal_path: Lookup failure for './file0' [ 138.211376][ T7189] EXT4-fs: error: could not find journal device path [ 138.278677][ T56] hsr_slave_0: left promiscuous mode [ 138.298477][ T56] hsr_slave_1: left promiscuous mode [ 138.310299][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.317812][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.329005][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.336417][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.344867][ T7196] loop0: detected capacity change from 0 to 2048 [ 138.371345][ T56] veth1_macvtap: left promiscuous mode [ 138.376949][ T56] veth0_macvtap: left promiscuous mode [ 138.382500][ T56] veth1_vlan: left promiscuous mode [ 138.387779][ T56] veth0_vlan: left promiscuous mode [ 138.401873][ T7196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.472655][ T7202] loop3: detected capacity change from 0 to 512 [ 138.549436][ T7202] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 138.584656][ T7202] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.603096][ T56] team0 (unregistering): Port device team_slave_1 removed [ 138.638552][ T56] team0 (unregistering): Port device team_slave_0 removed [ 138.661181][ T6730] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 138.967142][ T7204] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.001796][ T7126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.003722][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.015981][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.023453][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.030986][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.038447][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.045824][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.053277][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.060689][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.068140][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.075640][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.083075][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.090482][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.097988][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.105357][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.112769][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.120236][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.128086][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.135543][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.143026][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.150442][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.157840][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.165283][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.172681][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.180160][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.187540][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.195081][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.202488][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.209882][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.217310][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.224713][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.232175][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.239626][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.247052][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.254567][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.262031][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.269512][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.276945][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.284344][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.291792][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.299245][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.306634][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.314110][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.321514][ T3164] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 139.332517][ T3164] hid-generic 0000:0000:0004.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 139.336892][ T7126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.361302][ T1565] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 139.373794][ T1565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.373794][ T1565] [ 139.383512][ T1565] EXT4-fs (loop0): Total free blocks count 0 [ 139.389504][ T1565] EXT4-fs (loop0): Free/Dirty block details [ 139.395554][ T1565] EXT4-fs (loop0): free_blocks=2415919104 [ 139.401276][ T1565] EXT4-fs (loop0): dirty_blocks=8192 [ 139.406731][ T1565] EXT4-fs (loop0): Block reservation details [ 139.412818][ T1565] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 139.443038][ T7218] loop3: detected capacity change from 0 to 512 [ 139.468085][ T7218] journal_path: Lookup failure for './file0' [ 139.474110][ T7218] EXT4-fs: error: could not find journal device path [ 139.508941][ T7126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.518908][ T7126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.564261][ T1565] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 139.630496][ T7222] loop3: detected capacity change from 0 to 512 [ 139.637251][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.668688][ T7222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.671058][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.698666][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.705780][ T3151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.714111][ T7222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 139.732052][ T7222] System zones: 1-12 [ 139.735414][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.743056][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.750811][ T7222] EXT4-fs (loop3): 1 truncate cleaned up [ 139.756681][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.809043][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 139.809057][ T29] audit: type=1400 audit(1721667865.358:774): avc: denied { setopt } for pid=7224 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.933434][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.189268][ T7126] veth0_vlan: entered promiscuous mode [ 140.218984][ T7126] veth1_vlan: entered promiscuous mode [ 140.255068][ T7126] veth0_macvtap: entered promiscuous mode [ 140.279160][ T7126] veth1_macvtap: entered promiscuous mode [ 140.324597][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.335252][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.345191][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.355649][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.365558][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.375989][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.385963][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.396449][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.449172][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.477557][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.488100][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.497914][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.508329][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.518143][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.528582][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.538571][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.549005][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.609131][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.629288][ T7126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.638046][ T7126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.646764][ T7126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.655511][ T7126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.846482][ T7261] FAULT_INJECTION: forcing a failure. [ 140.846482][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 140.859187][ T7261] CPU: 0 UID: 0 PID: 7261 Comm: syz.4.1057 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 140.869550][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.871302][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114057000: rx timeout, send abort [ 140.879588][ T7261] Call Trace: [ 140.879597][ T7261] [ 140.879604][ T7261] dump_stack_lvl+0xf2/0x150 [ 140.887771][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114057c00: rx timeout, send abort [ 140.890997][ T7261] dump_stack+0x15/0x20 [ 140.895157][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888114057000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 140.898541][ T7261] should_fail_ex+0x229/0x230 [ 140.906694][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888114057c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 140.910803][ T7261] ? skb_clone+0x154/0x1f0 [ 140.948373][ T7261] should_failslab+0x8f/0xb0 [ 140.953050][ T7261] kmem_cache_alloc_noprof+0x4c/0x290 [ 140.958432][ T7261] skb_clone+0x154/0x1f0 [ 140.962789][ T7261] __netlink_deliver_tap+0x2bd/0x4c0 [ 140.968086][ T7261] netlink_sendskb+0x123/0x140 [ 140.972884][ T7261] netlink_unicast+0x291/0x670 [ 140.977736][ T7261] netlink_ack+0x4c4/0x4f0 [ 140.982223][ T7261] netlink_rcv_skb+0x19c/0x230 [ 140.987040][ T7261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.992498][ T7261] rtnetlink_rcv+0x1c/0x30 [ 140.996909][ T7261] netlink_unicast+0x593/0x670 [ 141.001792][ T7261] netlink_sendmsg+0x5cc/0x6e0 [ 141.006615][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.011962][ T7261] __sock_sendmsg+0x140/0x180 [ 141.016677][ T7261] ____sys_sendmsg+0x312/0x410 [ 141.021476][ T7261] __sys_sendmsg+0x1e9/0x280 [ 141.026111][ T7261] __x64_sys_sendmsg+0x46/0x50 [ 141.030870][ T7261] x64_sys_call+0x26f8/0x2e00 [ 141.035554][ T7261] do_syscall_64+0xc9/0x1c0 [ 141.040060][ T7261] ? clear_bhb_loop+0x55/0xb0 [ 141.044822][ T7261] ? clear_bhb_loop+0x55/0xb0 [ 141.049525][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.055429][ T7261] RIP: 0033:0x7f97a8b75e99 [ 141.059889][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.079553][ T7261] RSP: 002b:00007f97a7df7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.088024][ T7261] RAX: ffffffffffffffda RBX: 00007f97a8d05f60 RCX: 00007f97a8b75e99 [ 141.096016][ T7261] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 141.104074][ T7261] RBP: 00007f97a7df70a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.112043][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.120001][ T7261] R13: 000000000000000b R14: 00007f97a8d05f60 R15: 00007ffff00232a8 [ 141.127981][ T7261] [ 141.166696][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 141.244155][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.288895][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.295986][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.305659][ T29] audit: type=1400 audit(1721667866.848:775): avc: denied { accept } for pid=7276 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 141.325667][ T29] audit: type=1400 audit(1721667866.848:776): avc: denied { create } for pid=7276 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.348922][ T7246] bridge_slave_0: entered allmulticast mode [ 141.355324][ T7246] bridge_slave_0: entered promiscuous mode [ 141.363383][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.370492][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.377861][ T7246] bridge_slave_1: entered allmulticast mode [ 141.384232][ T7246] bridge_slave_1: entered promiscuous mode [ 141.398860][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.470353][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.507485][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.529144][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.576090][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.608684][ T7246] team0: Port device team_slave_0 added [ 141.619982][ T7246] team0: Port device team_slave_1 added [ 141.678896][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.685920][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.711913][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.777877][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.784941][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.810890][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.902093][ T6730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.928391][ T55] bridge_slave_1: left allmulticast mode [ 141.934180][ T55] bridge_slave_1: left promiscuous mode [ 141.940069][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.967104][ T55] bridge_slave_0: left allmulticast mode [ 141.972805][ T55] bridge_slave_0: left promiscuous mode [ 141.978683][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.988907][ T29] audit: type=1400 audit(1721667867.508:777): avc: denied { write } for pid=7288 comm="syz.3.1067" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.161745][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.172332][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.185827][ T55] bond0 (unregistering): Released all slaves [ 142.204246][ T7246] hsr_slave_0: entered promiscuous mode [ 142.213914][ T7246] hsr_slave_1: entered promiscuous mode [ 142.228176][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.245480][ T7246] Cannot create hsr debugfs directory [ 142.284778][ T7292] macvlan2: entered allmulticast mode [ 142.298276][ T7292] team_slave_0: entered promiscuous mode [ 142.303946][ T7292] team_slave_1: entered promiscuous mode [ 142.309619][ T7292] team0: entered allmulticast mode [ 142.314757][ T7292] team_slave_0: entered allmulticast mode [ 142.320506][ T7292] team_slave_1: entered allmulticast mode [ 142.337907][ T7292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.347279][ T7292] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 142.357596][ T55] hsr_slave_0: left promiscuous mode [ 142.365325][ T55] hsr_slave_1: left promiscuous mode [ 142.371049][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.378917][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.393041][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.400511][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.417662][ T55] veth1_macvtap: left promiscuous mode [ 142.423281][ T55] veth0_macvtap: left promiscuous mode [ 142.428857][ T55] veth1_vlan: left promiscuous mode [ 142.434257][ T55] veth0_vlan: left promiscuous mode [ 142.452831][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 142.624144][ T55] team0 (unregistering): Port device team_slave_1 removed [ 142.644351][ T55] team0 (unregistering): Port device team_slave_0 removed [ 142.989550][ T7315] loop0: detected capacity change from 0 to 256 [ 143.012522][ T7315] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 143.020689][ T29] audit: type=1400 audit(1721667868.558:778): avc: denied { mount } for pid=7314 comm="syz.0.1077" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 143.101824][ T7316] team0: Port device team_slave_0 removed [ 143.164621][ T7246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.199786][ T7246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.220832][ T7246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.241424][ T7246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.302980][ T29] audit: type=1400 audit(1721667868.848:779): avc: denied { unmount } for pid=6940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 143.346426][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.367982][ T7319] syz.0.1078[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.368084][ T7319] syz.0.1078[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.385036][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.431634][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.438728][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.452386][ T7321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1079'. [ 143.469521][ T7246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.479948][ T7246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.511288][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.515550][ T7323] loop0: detected capacity change from 0 to 512 [ 143.518391][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.557678][ T7323] journal_path: Lookup failure for './file0' [ 143.563716][ T7323] EXT4-fs: error: could not find journal device path [ 143.610985][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.682200][ T7330] loop0: detected capacity change from 0 to 512 [ 143.698414][ T7330] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.736462][ T7330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c01c, mo2=0002] [ 143.758209][ T7330] EXT4-fs (loop0): 1 truncate cleaned up [ 143.764281][ T7330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.792395][ T7246] veth0_vlan: entered promiscuous mode [ 143.810464][ T6940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.839722][ T7246] veth1_vlan: entered promiscuous mode [ 143.884015][ T7246] veth0_macvtap: entered promiscuous mode [ 143.916902][ T7246] veth1_macvtap: entered promiscuous mode [ 143.941798][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.952306][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.962121][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.972539][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.982488][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.992946][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.002777][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.013204][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.108486][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.129594][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.140096][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.150234][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.160680][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.170492][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.180980][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.190791][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.201217][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.301203][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.320530][ T7246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.329416][ T7246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.338146][ T7246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.346907][ T7246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.608677][ T7348] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 144.616537][ T7348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1085'. [ 144.667768][ T7348] nlmon0: entered promiscuous mode [ 144.672941][ T7348] nlmon0: entered allmulticast mode [ 144.718677][ T7348] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 144.736484][ T7350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34320 sclass=netlink_route_socket pid=7350 comm=syz.1.1085 [ 145.505667][ T7354] loop1: detected capacity change from 0 to 2048 [ 145.681849][ T7354] Alternate GPT is invalid, using primary GPT. [ 145.688342][ T7354] loop1: p2 p3 p7 [ 145.749111][ T7354] vhci_hcd: invalid port number 128 [ 145.754324][ T7354] vhci_hcd: default hub control req: 208c v8f06 i0080 l0 [ 145.991378][ T7359] loop1: detected capacity change from 0 to 512 [ 146.011176][ T7359] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1088: bg 0: block 5: invalid block bitmap [ 146.050740][ T7359] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 146.117878][ T7359] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1088: invalid indirect mapped block 3 (level 2) [ 146.168788][ T7359] EXT4-fs (loop1): 1 orphan inode deleted [ 146.174593][ T7359] EXT4-fs (loop1): 1 truncate cleaned up [ 146.219945][ T7359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.260545][ T7359] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 146.768364][ T7246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.952601][ T7365] loop1: detected capacity change from 0 to 512 [ 146.978007][ T7365] journal_path: Lookup failure for './file0' [ 146.984042][ T7365] EXT4-fs: error: could not find journal device path [ 147.131469][ T7369] loop1: detected capacity change from 0 to 512 [ 147.179036][ T7369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.237791][ T7369] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.330183][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 147.369719][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 147.387769][ T7369] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 147.428371][ T7246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.491390][ T7375] loop1: detected capacity change from 0 to 512 [ 147.569556][ T7375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002] [ 147.577502][ T7375] System zones: 1-12 [ 147.587794][ T7375] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1093: Attempting to read directory block (0) that is past i_size (256) [ 147.617776][ T7375] EXT4-fs (loop1): Remounting filesystem read-only [ 147.628364][ T7375] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 147.636858][ T7375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.649375][ T7375] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 147.656176][ T7375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.704393][ T1565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.787823][ T1565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.880818][ T1565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.949792][ T7373] chnl_net:caif_netlink_parms(): no params data found [ 147.996983][ T1565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.053431][ T7387] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 148.118488][ T7387] lo: entered promiscuous mode [ 148.171620][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.178836][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.218576][ T7373] bridge_slave_0: entered allmulticast mode [ 148.235493][ T7373] bridge_slave_0: entered promiscuous mode [ 148.263096][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.270274][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.298395][ T7373] bridge_slave_1: entered allmulticast mode [ 148.307777][ T7373] bridge_slave_1: entered promiscuous mode [ 148.315102][ T1565] bridge_slave_1: left allmulticast mode [ 148.320791][ T1565] bridge_slave_1: left promiscuous mode [ 148.326525][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.348796][ T1565] bridge_slave_0: left allmulticast mode [ 148.354456][ T1565] bridge_slave_0: left promiscuous mode [ 148.360090][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.552620][ T1565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.562871][ T1565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.579386][ T1565] bond0 (unregistering): Released all slaves [ 148.620345][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.641466][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.688715][ T1565] hsr_slave_0: left promiscuous mode [ 148.700307][ T1565] hsr_slave_1: left promiscuous mode [ 148.706086][ T29] audit: type=1400 audit(1721667874.248:780): avc: denied { map } for pid=7398 comm="syz.1.1098" path="socket:[29477]" dev="sockfs" ino=29477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.729313][ T29] audit: type=1400 audit(1721667874.248:781): avc: denied { read } for pid=7398 comm="syz.1.1098" path="socket:[29477]" dev="sockfs" ino=29477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.768428][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.775845][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.808081][ T1565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.815482][ T1565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.822788][ T29] audit: type=1400 audit(1721667874.298:782): avc: denied { create } for pid=7398 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.842895][ T29] audit: type=1400 audit(1721667874.298:783): avc: denied { read } for pid=7398 comm="syz.1.1098" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.866124][ T29] audit: type=1400 audit(1721667874.298:784): avc: denied { open } for pid=7398 comm="syz.1.1098" path="/dev/input/event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.890258][ T29] audit: type=1400 audit(1721667874.298:785): avc: denied { ioctl } for pid=7398 comm="syz.1.1098" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.959458][ T1565] veth1_macvtap: left promiscuous mode [ 148.965008][ T1565] veth0_macvtap: left promiscuous mode [ 148.970540][ T1565] veth1_vlan: left promiscuous mode [ 148.975764][ T1565] veth0_vlan: left promiscuous mode [ 149.178328][ T1565] team0 (unregistering): Port device team_slave_1 removed [ 149.198724][ T1565] team0 (unregistering): Port device team_slave_0 removed [ 149.279155][ T7373] team0: Port device team_slave_0 added [ 149.287605][ T7373] team0: Port device team_slave_1 added [ 149.312363][ T7401] tap0: tun_chr_ioctl cmd 1074025694 [ 149.341644][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.348726][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.374704][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.439766][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.446748][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.472723][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.547898][ T7373] hsr_slave_0: entered promiscuous mode [ 149.559147][ T7373] hsr_slave_1: entered promiscuous mode [ 149.564990][ T7373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.578772][ T7373] Cannot create hsr debugfs directory [ 149.923648][ T7373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.960823][ T7373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.987972][ T7373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.996612][ T7373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.088535][ T7373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.109992][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.139914][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.147373][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.198691][ T7373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.209064][ T7373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.243248][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.250338][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.336343][ T7413] loop1: detected capacity change from 0 to 512 [ 150.363055][ T7413] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1100: bg 0: block 5: invalid block bitmap [ 150.379756][ T7373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.441952][ T7413] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 150.475925][ T7413] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1100: invalid indirect mapped block 3 (level 2) [ 150.517954][ T7413] EXT4-fs (loop1): 1 orphan inode deleted [ 150.523734][ T7413] EXT4-fs (loop1): 1 truncate cleaned up [ 150.536689][ T7373] veth0_vlan: entered promiscuous mode [ 150.564323][ T7373] veth1_vlan: entered promiscuous mode [ 150.578054][ T7413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.599642][ T7413] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 150.613202][ T7373] veth0_macvtap: entered promiscuous mode [ 150.633147][ T7373] veth1_macvtap: entered promiscuous mode [ 150.651155][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.661765][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.671674][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.682085][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.691931][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.702942][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.713200][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.723739][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.820755][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.840125][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.850624][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.860532][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.871052][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.880932][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.891360][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.901178][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.911638][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.009474][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.029708][ T7373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.038475][ T7373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.047186][ T7373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.055912][ T7373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.117333][ T7246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.559920][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 151.709719][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.716903][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.724069][ T7432] bridge_slave_0: entered allmulticast mode [ 151.731323][ T7432] bridge_slave_0: entered promiscuous mode [ 151.741333][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.748909][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.758608][ T7432] bridge_slave_1: entered allmulticast mode [ 151.765222][ T7432] bridge_slave_1: entered promiscuous mode [ 151.789791][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.822729][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.876661][ T7432] team0: Port device team_slave_0 added [ 151.893655][ T7432] team0: Port device team_slave_1 added [ 151.942406][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.949864][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.975827][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.016005][ T7447] loop1: detected capacity change from 0 to 512 [ 152.049323][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.056277][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.082242][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.087777][ T7447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.139664][ T7447] EXT4-fs (loop1): 1 truncate cleaned up [ 152.145808][ T7447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.195730][ T7246] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /18/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.221320][ T7432] hsr_slave_0: entered promiscuous mode [ 152.228394][ T7246] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.238436][ T7432] hsr_slave_1: entered promiscuous mode [ 152.258194][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.258779][ T29] audit: type=1400 audit(1721667877.778:786): avc: denied { remove_name } for pid=7246 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.265730][ T7432] Cannot create hsr debugfs directory [ 152.294463][ T29] audit: type=1400 audit(1721667877.778:787): avc: denied { rmdir } for pid=7246 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.379576][ T7246] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /18/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.422590][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.439056][ T7246] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.468309][ T7246] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /18/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.513310][ T7246] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.514028][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.558237][ T7246] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /18/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.597948][ T7432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.598006][ T7246] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.641440][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.667986][ T7246] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /18/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.702361][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.718147][ T7246] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.751046][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 152.906304][ T55] bridge_slave_1: left allmulticast mode [ 152.911997][ T55] bridge_slave_1: left promiscuous mode [ 152.917653][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.927445][ T55] bridge_slave_0: left allmulticast mode [ 152.933169][ T55] bridge_slave_0: left promiscuous mode [ 152.938931][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.040736][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.050987][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.061476][ T55] bond0 (unregistering): Released all slaves [ 153.096661][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.103813][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.112135][ T7449] bridge_slave_0: entered allmulticast mode [ 153.119744][ T7449] bridge_slave_0: entered promiscuous mode [ 153.126878][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.133992][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.141224][ T7449] bridge_slave_1: entered allmulticast mode [ 153.147781][ T7449] bridge_slave_1: entered promiscuous mode [ 153.170016][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.184705][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.207840][ T55] hsr_slave_0: left promiscuous mode [ 153.215017][ T55] hsr_slave_1: left promiscuous mode [ 153.222057][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.229480][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.237481][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.244908][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.255066][ T55] veth1_macvtap: left promiscuous mode [ 153.260857][ T55] veth0_macvtap: left promiscuous mode [ 153.266373][ T55] veth1_vlan: left promiscuous mode [ 153.269022][ T7455] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.271757][ T55] veth0_vlan: left promiscuous mode [ 153.411670][ T55] team0 (unregistering): Port device team_slave_1 removed [ 153.421809][ T55] team0 (unregistering): Port device team_slave_0 removed [ 153.478438][ T7449] team0: Port device team_slave_0 added [ 153.510376][ T7449] team0: Port device team_slave_1 added [ 153.538523][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.545474][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.571769][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.606147][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.613139][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.639168][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.682511][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 153.700586][ T7449] hsr_slave_0: entered promiscuous mode [ 153.706821][ T7449] hsr_slave_1: entered promiscuous mode [ 153.713979][ T7449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.721730][ T7449] Cannot create hsr debugfs directory [ 153.792701][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.800254][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.807676][ T7468] bridge_slave_0: entered allmulticast mode [ 153.814132][ T7468] bridge_slave_0: entered promiscuous mode [ 153.840058][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.847114][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.854330][ T7468] bridge_slave_1: entered allmulticast mode [ 153.862022][ T7468] bridge_slave_1: entered promiscuous mode [ 153.884002][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 153.944837][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.962415][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.001173][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.008274][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.016257][ T7478] bridge_slave_0: entered allmulticast mode [ 154.024188][ T7478] bridge_slave_0: entered promiscuous mode [ 154.030958][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.038085][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.046539][ T7478] bridge_slave_1: entered allmulticast mode [ 154.053064][ T7478] bridge_slave_1: entered promiscuous mode [ 154.061368][ T7468] team0: Port device team_slave_0 added [ 154.070130][ T7468] team0: Port device team_slave_1 added [ 154.097253][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.104382][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.130272][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.145123][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.155913][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.172140][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.179224][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.205239][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.223546][ T7478] team0: Port device team_slave_0 added [ 154.232132][ T7478] team0: Port device team_slave_1 added [ 154.255375][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.262407][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.288337][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.307823][ T7468] hsr_slave_0: entered promiscuous mode [ 154.313806][ T7468] hsr_slave_1: entered promiscuous mode [ 154.323571][ T7468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.331271][ T7468] Cannot create hsr debugfs directory [ 154.337011][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.344063][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.370033][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.413936][ T7478] hsr_slave_0: entered promiscuous mode [ 154.420945][ T7478] hsr_slave_1: entered promiscuous mode [ 154.429931][ T7478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.437542][ T7478] Cannot create hsr debugfs directory [ 154.566884][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 154.598969][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.605999][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.613281][ T7499] bridge_slave_0: entered allmulticast mode [ 154.619804][ T7499] bridge_slave_0: entered promiscuous mode [ 154.626581][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.633661][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.640905][ T7499] bridge_slave_1: entered allmulticast mode [ 154.647330][ T7499] bridge_slave_1: entered promiscuous mode [ 154.663587][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.673985][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.692703][ T7499] team0: Port device team_slave_0 added [ 154.699104][ T7499] team0: Port device team_slave_1 added [ 154.715076][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.722081][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.748021][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.759278][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.766230][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.792236][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.816486][ T7499] hsr_slave_0: entered promiscuous mode [ 154.822702][ T7499] hsr_slave_1: entered promiscuous mode [ 154.828586][ T7499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.836112][ T7499] Cannot create hsr debugfs directory [ 156.320743][ T7432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.370305][ T7432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.450937][ T7432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.522611][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.545001][ T7432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.553944][ T7432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.562192][ T7432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.572612][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.583577][ T7432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.617581][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.631877][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.644102][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.653609][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.660699][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.671879][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.678951][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.697463][ T7432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.708158][ T7432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.740843][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.773513][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.825357][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.844577][ T7432] veth0_vlan: entered promiscuous mode [ 156.852467][ T7432] veth1_vlan: entered promiscuous mode [ 156.872386][ T7432] veth0_macvtap: entered promiscuous mode [ 156.879862][ T7432] veth1_macvtap: entered promiscuous mode [ 156.891234][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.906248][ T7449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.915576][ T7449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.924478][ T7449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.935089][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.947616][ T7449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.956207][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.966669][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.976499][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.987008][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.996808][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.007216][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.017055][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.027465][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.038784][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.052142][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.064149][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.074645][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.084450][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.094976][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.105185][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.115787][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.125622][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.136078][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.146852][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.156916][ T7432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.165704][ T7432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.174460][ T7432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.183172][ T7432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.221869][ T55] bridge_slave_1: left allmulticast mode [ 157.227497][ T55] bridge_slave_1: left promiscuous mode [ 157.233424][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.241866][ T55] bridge_slave_0: left allmulticast mode [ 157.247504][ T55] bridge_slave_0: left promiscuous mode [ 157.253208][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.261688][ T55] bridge_slave_1: left allmulticast mode [ 157.267338][ T55] bridge_slave_1: left promiscuous mode [ 157.273031][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.283141][ T55] bridge_slave_0: left allmulticast mode [ 157.288933][ T55] bridge_slave_0: left promiscuous mode [ 157.289044][ T7528] loop2: detected capacity change from 0 to 512 [ 157.294736][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.301362][ T7528] journal_path: Lookup failure for './file0' [ 157.313828][ T7528] EXT4-fs: error: could not find journal device path [ 157.321357][ T55] bridge_slave_1: left allmulticast mode [ 157.326996][ T55] bridge_slave_1: left promiscuous mode [ 157.332758][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.340948][ T55] bridge_slave_0: left allmulticast mode [ 157.346589][ T55] bridge_slave_0: left promiscuous mode [ 157.352374][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.620403][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.630393][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.640447][ T55] bond0 (unregistering): Released all slaves [ 157.649122][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.660698][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.670963][ T55] bond0 (unregistering): Released all slaves [ 157.680462][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.690518][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.700759][ T55] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 157.710609][ T55] team0: left allmulticast mode [ 157.715448][ T55] team_slave_0: left allmulticast mode [ 157.721005][ T55] team_slave_1: left allmulticast mode [ 157.726445][ T55] team_slave_0: left promiscuous mode [ 157.732016][ T55] team_slave_1: left promiscuous mode [ 157.739786][ T55] bond0 (unregistering): Released all slaves [ 157.785386][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.797326][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.806941][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.814010][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.822662][ T7533] loop2: detected capacity change from 0 to 512 [ 157.831842][ T7533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1111: bg 0: block 5: invalid block bitmap [ 157.839133][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.851206][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.859144][ T7533] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 157.871074][ T7533] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1111: invalid indirect mapped block 3 (level 2) [ 157.884489][ T7533] EXT4-fs (loop2): 1 orphan inode deleted [ 157.890295][ T7533] EXT4-fs (loop2): 1 truncate cleaned up [ 157.896604][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.913278][ T7533] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 157.917887][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.951434][ T55] hsr_slave_0: left promiscuous mode [ 157.957250][ T55] hsr_slave_1: left promiscuous mode [ 157.963119][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.970561][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.978188][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.985572][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.994763][ T55] hsr_slave_0: left promiscuous mode [ 158.000334][ T55] hsr_slave_1: left promiscuous mode [ 158.005850][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.013266][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.021145][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.028535][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.037477][ T55] hsr_slave_0: left promiscuous mode [ 158.043318][ T55] hsr_slave_1: left promiscuous mode [ 158.049249][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.056681][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.064522][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.072159][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.083602][ T55] veth1_macvtap: left promiscuous mode [ 158.089120][ T55] veth0_macvtap: left promiscuous mode [ 158.094585][ T55] veth1_vlan: left promiscuous mode [ 158.099889][ T55] veth0_vlan: left promiscuous mode [ 158.105697][ T55] veth1_macvtap: left promiscuous mode [ 158.111163][ T55] veth0_macvtap: left promiscuous mode [ 158.116674][ T55] veth1_vlan: left promiscuous mode [ 158.121895][ T55] veth0_vlan: left promiscuous mode [ 158.127668][ T55] veth1_macvtap: left promiscuous mode [ 158.133240][ T55] veth0_macvtap: left promiscuous mode [ 158.138911][ T55] veth1_vlan: left promiscuous mode [ 158.144182][ T55] veth0_vlan: left promiscuous mode [ 158.297439][ T55] team0 (unregistering): Port device team_slave_1 removed [ 158.308156][ T55] team0 (unregistering): Port device team_slave_0 removed [ 158.366155][ T55] team0 (unregistering): Port device team_slave_1 removed [ 158.377690][ T55] team0 (unregistering): Port device team_slave_0 removed [ 158.436312][ T55] team0 (unregistering): Port device team_slave_1 removed [ 158.445999][ T55] team0 (unregistering): Port device team_slave_0 removed [ 158.505428][ T7468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.518377][ T7468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.528370][ T7468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.536723][ T7468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.590822][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.602502][ T7432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.610525][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.620362][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.627425][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.652049][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.659151][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.674703][ T7449] veth0_vlan: entered promiscuous mode [ 158.685060][ C1] eth0: bad gso: type: 1, size: 1408 [ 158.696049][ T7449] veth1_vlan: entered promiscuous mode [ 158.717272][ T7468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.727664][ T7468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.752244][ T7449] veth0_macvtap: entered promiscuous mode [ 158.761700][ T7449] veth1_macvtap: entered promiscuous mode [ 158.772346][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.782950][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.792802][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.803238][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.813873][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.822087][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.832543][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.842457][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.852985][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.864009][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.878196][ T7449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.886950][ T7449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.895693][ T7449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.904418][ T7449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.923698][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.934920][ T7561] loop2: detected capacity change from 0 to 512 [ 158.943747][ T7561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002] [ 158.952566][ T7561] System zones: 1-12 [ 158.956754][ T7561] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1114: Attempting to read directory block (0) that is past i_size (256) [ 158.972403][ T7561] EXT4-fs (loop2): Remounting filesystem read-only [ 158.979115][ T7561] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 158.988070][ T7561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.008284][ T7561] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 159.011309][ T7478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.023080][ T7561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.037375][ T7499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.051815][ T7478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.063432][ T7478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.072881][ T7478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.090977][ T7499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.109415][ T7468] veth0_vlan: entered promiscuous mode [ 159.120672][ T7468] veth1_vlan: entered promiscuous mode [ 159.152085][ T7499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.164781][ T7468] veth0_macvtap: entered promiscuous mode [ 159.173506][ T7468] veth1_macvtap: entered promiscuous mode [ 159.187870][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.195631][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.206160][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.215979][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.226406][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.236229][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.246790][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.257418][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.270726][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.281278][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.291146][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.301789][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.311675][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.322151][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.332807][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.345961][ T7499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.358178][ T7478] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.367837][ T7468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.376541][ T7468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.385357][ T7468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.394174][ T7468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.405100][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.412185][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.425685][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.432752][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.455084][ T7478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.465503][ T7478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.486891][ T7499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.502772][ T7499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.512270][ T7499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.525199][ T7499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.566246][ T7593] loop3: detected capacity change from 0 to 512 [ 159.578711][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.592911][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.599449][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.605721][ T7593] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.614514][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.637235][ T29] audit: type=1400 audit(1721667885.178:788): avc: denied { mounton } for pid=7591 comm="syz.3.1106" path="/0/bus/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.647525][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.666704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.674977][ T3164] ================================================================== [ 159.683057][ T3164] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 159.691203][ T3164] [ 159.693613][ T3164] read-write to 0xffff8881004c1e70 of 8 bytes by task 7593 on cpu 1: [ 159.701669][ T3164] __filemap_remove_folio+0x1c5/0x2c0 [ 159.707023][ T3164] __remove_mapping+0x33f/0x470 [ 159.711856][ T3164] remove_mapping+0x22/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.716343][ T3164] mapping_try_invalidate+0x266/0x3f0 [ 159.719527][ T29] audit: type=1400 audit(1721667885.228:789): avc: denied { write } for pid=3076 comm="syz-executor" path="pipe:[1654]" dev="pipefs" ino=1654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 159.721684][ T3164] invalidate_mapping_pages+0x27/0x40 [ 159.750021][ T3164] invalidate_bdev+0x58/0x70 [ 159.754603][ T3164] loop_set_status+0x114/0x550 [ 159.759347][ T3164] lo_ioctl+0x7fd/0x11d0 [ 159.763562][ T3164] blkdev_ioctl+0x35f/0x450 [ 159.768044][ T3164] __se_sys_ioctl+0xd3/0x150 [ 159.772624][ T3164] __x64_sys_ioctl+0x43/0x50 [ 159.777192][ T3164] x64_sys_call+0x1688/0x2e00 [ 159.781847][ T3164] do_syscall_64+0xc9/0x1c0 [ 159.786325][ T3164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.792201][ T3164] [ 159.794503][ T3164] read to 0xffff8881004c1e70 of 8 bytes by task 3164 on cpu 0: [ 159.802016][ T3164] nr_blockdev_pages+0x7c/0xd0 [ 159.806759][ T3164] si_meminfo+0x87/0xd0 [ 159.810888][ T3164] update_defense_level+0x49/0x5b0 [ 159.815977][ T3164] defense_work_handler+0x1f/0x80 [ 159.820983][ T3164] process_scheduled_works+0x483/0x9a0 [ 159.826421][ T3164] worker_thread+0x526/0x700 [ 159.830989][ T3164] kthread+0x1d1/0x210 [ 159.835040][ T3164] ret_from_fork+0x4b/0x60 [ 159.839436][ T3164] ret_from_fork_asm+0x1a/0x30 [ 159.844235][ T3164] [ 159.846533][ T3164] value changed: 0x0000000000000009 -> 0x0000000000000002 [ 159.853642][ T3164] [ 159.855940][ T3164] Reported by Kernel Concurrency Sanitizer on: [ 159.862064][ T3164] CPU: 0 UID: 0 PID: 3164 Comm: kworker/0:4 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 159.872460][ T3164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.882514][ T3164] Workqueue: events_long defense_work_handler [ 159.888566][ T3164] ================================================================== [ 159.917548][ T29] audit: type=1400 audit(1721667885.298:790): avc: denied { recv } for pid=3076 comm="syz-executor" saddr=10.128.0.163 src=48620 daddr=10.128.1.161 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 159.947956][ T7593] loop3: detected capacity change from 512 to 11 [ 159.955384][ T7597] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 159.963483][ T7597] EXT4-fs error (device loop3): ext4_write_dquot:6828: comm syz.3.1106: Failed to commit dquot type 0 [ 159.977329][ T7597] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 159.985518][ T7597] EXT4-fs error (device loop3): ext4_write_dquot:6828: comm syz.3.1106: Failed to commit dquot type 1 [ 159.996914][ T7597] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 160.006685][ T7597] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.1106: mark_inode_dirty error [ 160.018485][ T7597] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 160.027548][ T7597] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm syz.3.1106: mark_inode_dirty error [ 160.039219][ T7597] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 160.067763][ T7597] EXT4-fs error (device loop3): ext4_punch_hole:4081: inode #18: comm syz.3.1106: mark_inode_dirty error [ 160.228872][ T55] bridge_slave_1: left allmulticast mode [ 160.234513][ T55] bridge_slave_1: left promiscuous mode [ 160.240281][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.248305][ T55] bridge_slave_0: left allmulticast mode [ 160.253942][ T55] bridge_slave_0: left promiscuous mode [ 160.259685][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.389997][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.399892][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.409905][ T55] bond0 (unregistering): Released all slaves [ 160.510405][ T55] hsr_slave_0: left promiscuous mode [ 160.515957][ T55] hsr_slave_1: left promiscuous mode [ 160.521813][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.529251][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.537223][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.544669][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.553663][ T55] veth1_macvtap: left promiscuous mode [ 160.559204][ T55] veth0_macvtap: left promiscuous mode [ 160.564749][ T55] veth1_vlan: left promiscuous mode [ 160.570020][ T55] veth0_vlan: left promiscuous mode [ 160.640913][ T55] team0 (unregistering): Port device team_slave_1 removed [ 162.688486][ T55] bridge_slave_1: left allmulticast mode [ 162.694132][ T55] bridge_slave_1: left promiscuous mode [ 162.700043][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.707871][ T55] bridge_slave_0: left allmulticast mode [ 162.713527][ T55] bridge_slave_0: left promiscuous mode [ 162.719296][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.799794][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.809881][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.819781][ T55] bond0 (unregistering): Released all slaves [ 162.989885][ T55] hsr_slave_0: left promiscuous mode [ 162.995517][ T55] hsr_slave_1: left promiscuous mode [ 163.001331][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.008878][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.047488][ T55] team0 (unregistering): Port device team_slave_1 removed [ 163.056952][ T3164] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 163.066006][ T55] team0 (unregistering): Port device team_slave_0 removed [ 163.232382][ T7597] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.242542][ T7594] bio_check_eod: 26 callbacks suppressed [ 163.242578][ T7594] kmmpd-loop3: attempt to access beyond end of device [ 163.242578][ T7594] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 163.261826][ T7594] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 163.392576][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.880123][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.930571][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.980615][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.040468][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.101199][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.180761][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.240403][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.478952][ T55] bridge_slave_1: left allmulticast mode [ 165.484589][ T55] bridge_slave_1: left promiscuous mode [ 165.490316][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.498134][ T55] bridge_slave_0: left allmulticast mode [ 165.503777][ T55] bridge_slave_0: left promiscuous mode [ 165.509544][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.517539][ T55] bridge_slave_1: left allmulticast mode [ 165.523250][ T55] bridge_slave_1: left promiscuous mode [ 165.529026][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.536636][ T55] bridge_slave_0: left allmulticast mode [ 165.542286][ T55] bridge_slave_0: left promiscuous mode [ 165.547951][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.555856][ T55] bridge_slave_1: left allmulticast mode [ 165.561515][ T55] bridge_slave_1: left promiscuous mode [ 165.567178][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.574934][ T55] bridge_slave_0: left allmulticast mode [ 165.580589][ T55] bridge_slave_0: left promiscuous mode [ 165.586315][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.839859][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.849786][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.859565][ T55] bond0 (unregistering): Released all slaves [ 165.868454][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.878472][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.888562][ T55] bond0 (unregistering): Released all slaves [ 165.897354][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.907219][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.917115][ T55] bond0 (unregistering): Released all slaves [ 166.040326][ T55] hsr_slave_0: left promiscuous mode [ 166.046066][ T55] hsr_slave_1: left promiscuous mode [ 166.051921][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.059451][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.066941][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.074359][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.083034][ T55] hsr_slave_0: left promiscuous mode [ 166.088758][ T55] hsr_slave_1: left promiscuous mode [ 166.094426][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.101884][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.109325][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.116683][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.125324][ T55] hsr_slave_0: left promiscuous mode [ 166.130883][ T55] hsr_slave_1: left promiscuous mode [ 166.136608][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.144829][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.155048][ T55] veth1_macvtap: left promiscuous mode [ 166.160541][ T55] veth0_macvtap: left promiscuous mode [ 166.165999][ T55] veth1_vlan: left promiscuous mode [ 166.171269][ T55] veth0_vlan: left promiscuous mode [ 166.177233][ T55] veth1_macvtap: left promiscuous mode [ 166.182800][ T55] veth0_macvtap: left promiscuous mode [ 166.188384][ T55] veth1_vlan: left promiscuous mode [ 166.193734][ T55] veth0_vlan: left promiscuous mode [ 166.319505][ T55] team0 (unregistering): Port device team_slave_1 removed [ 166.329413][ T55] team0 (unregistering): Port device team_slave_0 removed [ 166.383862][ T55] team0 (unregistering): Port device team_slave_1 removed [ 166.393897][ T55] team0 (unregistering): Port device team_slave_0 removed [ 166.446410][ T55] team0 (unregistering): Port device team_slave_1 removed [ 166.456902][ T55] team0 (unregistering): Port device team_slave_0 removed