last executing test programs: 7.881204432s ago: executing program 0 (id=8151): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@bsdgroups}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x55e}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}], [{@flag='ro'}, {@fowner_lt={'fowner<', r5}}, {@flag='sync'}, {@seclabel}, {@uid_gt={'uid>', r6}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 6.494606066s ago: executing program 0 (id=8151): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@bsdgroups}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x55e}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}], [{@flag='ro'}, {@fowner_lt={'fowner<', r5}}, {@flag='sync'}, {@seclabel}, {@uid_gt={'uid>', r6}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 5.126853528s ago: executing program 0 (id=8151): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@bsdgroups}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x55e}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}], [{@flag='ro'}, {@fowner_lt={'fowner<', r5}}, {@flag='sync'}, {@seclabel}, {@uid_gt={'uid>', r6}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 3.699313576s ago: executing program 1 (id=8272): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) 3.600347284s ago: executing program 3 (id=8275): set_mempolicy(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x40505330, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 3.599924334s ago: executing program 1 (id=8276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x4, &(0x7f0000000000)={0x8, 0x100000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000014d8740909000000fa1b6c0000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x707400, 0x0) io_uring_enter(r11, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000100)='\xd3\x9cqG?\x99\\\x8b\x89\x15\xb9\x8a\xa5\x0e\xa2\xfa\x05.\xc2\xd7?\xd8\xba{j\\\xc2`:f\x13\xa2\xcaS\xa4,^^&\x86\xdei\xc80\x14\x92\xeaY\xdf\xc3@\xc6W\xb8\x11\xbe\xd4D\xec\x9e1\x12{', 0x0, 0x21, 0x0) 3.564398197s ago: executing program 0 (id=8151): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@bsdgroups}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x55e}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}], [{@flag='ro'}, {@fowner_lt={'fowner<', r5}}, {@flag='sync'}, {@seclabel}, {@uid_gt={'uid>', r6}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 2.229299117s ago: executing program 3 (id=8278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) close(r0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x7fe2, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000006f0000002a0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open$cgroup(&(0x7f0000000480)={0x2, 0x80, 0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x18840, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000400)}, 0x440, 0x3f000, 0x2, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000600000085000000860000001801000020696c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r3, 0x0, 0x50, &(0x7f0000000580)='c!\xacc\x92\xf8\xfdp\x9aroup\x00|\xe9\xf5\x15\b\xea\xa5D\x00;\xc1K\xad\x8a\xf9\xf3\'\x1b\xaem\xba\xa5\xc6\xdbO\'\x1b\xce\x8c\xfbLT`Xr\xf6\xd5w\xc9\xd5\xdc\xbf]\xd1\x10\xd7\x10B\x18\xe2\x1b\xabp\t\xf2\xfb\xfd\xc6\xc7\xd04zf\x05\xfd\x1d'}, 0x30) 2.098991997s ago: executing program 2 (id=8282): r0 = syz_open_procfs(0x0, &(0x7f0000000980)='projid_map\x00') write$sndseq(r0, 0x0, 0x0) 2.079987009s ago: executing program 3 (id=8284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0x7ffc, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = dup3(r1, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f00000001c0)) 2.046880122s ago: executing program 4 (id=8285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000440)=""/4096) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x5, "deb28eecdf7a00f7976091e67677a13b8e74a2860dc7ee1d1f0940d2709bfab72b0746197acbe9e9b9343349d60e4fabf96916d5551befd188d8dbdaabad7d5a8b43ef8717b7781642813438588e9035f215965d7f12625190006f2b21c24cc542555530cf5d028b4d4e3ed75f705331f569a749548ada1f76750cce2a1cc5fed08322a436debe47876b1056f47260c54f800400279d5b9a93db1f06808dfc6ac6d23ad534e39f86118301231a3099b52a84dcc3616453a7bf7f775c94fba455a240e25a22697573255e54531ffe15f84540846293272b10d10e99691746ed8518860dd15d8dd3b2885d033f6f915af635ae37fdcbe38cbc4937bd63167c7830", 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x2}}}, 0x128) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80003, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x7fe2, 0x0, 0x0, 0x1}, 0x48) 2.004836845s ago: executing program 2 (id=8286): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffff) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 1.935880541s ago: executing program 2 (id=8287): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x20048001) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x200088c0) 1.935170131s ago: executing program 1 (id=8288): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x8800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) 1.875208956s ago: executing program 2 (id=8289): set_mempolicy(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x40505330, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 1.874809876s ago: executing program 1 (id=8290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000750000002a00080095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='percpu_free_percpu\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBvnTh9URJKefQFgYKoeCRN+qAHLkUgcQAJCQ5FnEyaVqVug5og0aqCwiEcUSXuiCMSfwEXygUBJySucEdIEcqFwslo7d3UOLYTJ05c4t9PWnXGO+7Mt7sTj2d2HUDfGo2IAxFxT0T8GhHDEZE0Fhit/XN78frU34vXp5KoVN74M6mW+2vx+lReNH/frlqmMtCm3vm3I0rl8vSVLD8+d+m98dmr1567cKl0fvr89OXJU6eOHzs0dHLyRFfi3J22df+HMwf3vfLWzdemztx858evkyzuaIijW0arR625J7tdWY/trksngz1sCB1J+2h6uorV/j8cA7Fjad9wvPxJTxsHbKhKpVDZ1nr3jQqwhaWjeaAf5R/06ffffNukocddYeF0LM1j3M622p7BKGRlihtY/2hEnLnxzxfpFhs0DwEAUO/W6Yh4ttn4rxAP1pW7N1sbGomI+yJiT0TcHxF7I+KBiGrZhyLi4Q7rb1whWT7+qQyvKbBVSsd/L2RrW/8d/+WjvxgZyHK7q/EXk3MXytNHs2NyJIrb0vxEmzq+e+mXz1rtqx//pVtafz4WzNrxx2DDBN3ZUrG0npjrLXxcWwBYHn8S+TJOOj7eFxH7O/y/8+8YF57+6mCrMivH30YX1pkqX0Y8VTv/N6Ih/lzScn1y4vmTkyfGt0d5+uh4flUs99PP86+3qn9d8XfBwq1K7Gx6/S/FP5Jsj5i9eu1idb12tvM65n/7tOV3mrVd/3OloeTNanooe+2D0tzclYmIoeTV5a9P3nlvns/Lp9f/kcPN+/+euHMkDkREehEfiohHIuLRrO2PRcTjEXG4Tfw/vPjEu53H32ZWvovS+M+udP6j/vx3nhi4+P03ncefS8//8WrqSPZKev5Ximu1DVzPsQMAAID/i0L1HvikMLaULhTGxmr38O+NnYXyzOzcM+dm3r98tnav/EgUC/lM13DdfOhENjec5ycb8seyeePPB3ZU82NTM+VO5xOB7trVov+nfm/3AA+wNXheC/qX/g/9S/+H/qX/Q//S/6F/Nev/H/WgHcDmW+Hzf8dmtQPYfMb/0L/0f+hf+j/0pZbPxhfW9ci/RI8S3w6t77caVp+Iwl0S8pZJFKPprsFV/5jFGhJJRGxruqvXf5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6498AAAD//9di55E=") socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e1e, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {r8, r9/1000+60000}}) io_uring_enter(r5, 0x569, 0x0, 0x0, 0x0, 0x57) ioctl$TCSETSW2(r4, 0x5403, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb52d4408020eadd1beaa82dc5ecf"}) r10 = socket(0x1f, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.874679366s ago: executing program 0 (id=8151): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@bsdgroups}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x55e}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}], [{@flag='ro'}, {@fowner_lt={'fowner<', r5}}, {@flag='sync'}, {@seclabel}, {@uid_gt={'uid>', r6}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 447.230923ms ago: executing program 1 (id=8291): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x51, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 446.847043ms ago: executing program 2 (id=8292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@ipv6_newnexthop={0x1c, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 446.365133ms ago: executing program 3 (id=8293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001540)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "5f330000a90100f9"}) 445.874913ms ago: executing program 4 (id=8294): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x8, 0x1, 0x1, 0xe2, 0x0, 0x9, 0x10000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0x10}, 0x110846, 0xee6d, 0xd7, 0x2, 0x0, 0x8, 0x8, 0x0, 0xffffffff, 0x0, 0x2000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x2906000, 0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) listen(r1, 0x400) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) 378.751049ms ago: executing program 3 (id=8295): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000a7000000000000fd4e0000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe08a118000e800a00142603600e1208000f0000000406a80016c0080009400c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87", 0x81}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xb3, 0x0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000140)="f9ae", 0x5, 0x0, 0x0, 0x0) 346.255751ms ago: executing program 4 (id=8296): r0 = syz_open_procfs(0x0, &(0x7f0000000980)='projid_map\x00') write$sndseq(r0, 0x0, 0x0) 345.937971ms ago: executing program 2 (id=8297): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 309.657084ms ago: executing program 3 (id=8298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f0000002a00)=""/4111, 0x100f, 0x40000002, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x40c5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000001c0)="d2554b5790ec09e4c7"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$802154_dgram(r3, &(0x7f0000000300)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000180)="10000000000000002900000004000000", 0x10) 309.327024ms ago: executing program 4 (id=8299): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xb}, {0x26, 0x0, 0x0, 0xf1000000}}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, r3, &(0x7f0000000440)={0x800}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000100)={0x50}, 0xb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000200)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, {0x1, @multicast, 'dummy0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f00000004c0)={0x18, 0x0, {0x0, @empty, 'veth0_to_bond\x00'}}, 0x1e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x4ed9779ae9bea329, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@ifindex=r5, 0xffffffffffffffff, 0x15, 0x0, 0x0, @link_fd, r9}, 0xffffffffffffff81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r11, 0x25, 0x8, @void}, 0x10) 270.041548ms ago: executing program 4 (id=8300): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r0}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0/file0\x00'}, 0x18) 246.18654ms ago: executing program 1 (id=8301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x903840, 0x0) link(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./bus\x00') unlink(&(0x7f0000001fc0)='./file0\x00') unlink(&(0x7f0000000080)='./bus\x00') sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000012000000080006000000000018000180140002006261746164765f736c6176655f310000080009"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7560af40b3a65a00000000323edc950000000000"], 0xa6, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f00000000c0)={[{@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@fat=@gid}, {@utf8}, {@rodir}, {@rodir}]}, 0x1, 0x289, &(0x7f0000000480)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="8bb177c20a7c0c4100ffa6f380d6f8b97a7ec099763b4f63ec4fa644e9a3c503e2cf989619c4c6a3741628a38e59ce76f73bcd4623d6798a3234c32ef1fb6954cc0701000000acaea457f05e513b1a51d326d737a9"], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) 170.496956ms ago: executing program 4 (id=8302): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_clone(0x44208400, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") tkill(r0, 0x0) 0s ago: executing program 0 (id=8151): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r2, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@bsdgroups}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$eJzs3MtvG8UfAPDvrpM+f3n8Snn0ATUUREQhadICFeICAqkXJCQ4wDGkoQpNW9QEiVYVLQiVI+IvAI5I/AWc4IKAE4gr3BFShXqhcEBG691tnNgJiR3Xbf35SI5n1rue+e7sOLM7XgfQt6rZnySiFhG/RMRInl2+QjV/un7t4sxf1y7OJFGrvfJHUl/vz2sXZ8pVy+12FpmxNCL9MIl9LcpdOH/h1PT8/Oy5Ij+xePrtiYXzF56Y21IsOXbs6JHJp5+aenJT4hzK6rr3vbP79xx//ZOXZmrxxvdfZvX9X/F6Yxy50Y7LrEZ1+b6sy+N7pON3v7UMNaSTgR5WhA2pRETWXIP1/j8SlVhqvJF48YOeVg7oqlqtVtvatLRSJi7XgDtYEr2uAdAb5T/67Py3fNzE4UfPXX0uPwHK4r5ePPJXBiLNnrblZ+xDXSq/GhGvXf770+wRLa9DtLatS/UBAO58X2fjn8dbjf+Gk3sa1hsu5oZGI+JQROyKiLsiYndE3B0R2br3RsR9Gyy/uiLfPP75aXtbga1TNv57tpjbWj7+S8tVRitFbqge/2Dy5tz87OFin4zF4NYsP7lGGd+88PPHq73WOP7LHln55ViwqMfvAysu0J2YXpzuJOZGz8zlz83xL10XSCJiT0TsbeP9s30299gX+7P08M7m1/87/jVswjxT7fOIR/P4L8eK+EtJXlIxP3l6+uTsydkzUzfmJye2xfzs4YnyqGj2w49XXm7MDzakO4p/E1x9P2LHKu1fV3aDcr52YeNlXPn1o1XPado9/rckr9bT5Wzxu9OLi+cmI7YUC5Ytn1ratsyX62fxjx1sFf9wsivin8+K7fZFRHYQ3x8RD0TEgaLuD0bEQxFxcI34v3v+4bfW3kO9bf8Ta7V/xGjSOF/fRqJy6tuvWhRdb6L1tf/RemqsWLKez7/1VrDT/QcAAAC3g7T+HfgkHb+RTtPx8fw7/LtjRzp/dmHxUDXeOXMi/678aAym5ZWukYbroZPFteEyP7UifyQi/l+/ori9nh+fOTvfrTl1YH12rtL/M79Vel07oOs2NI/WfEcbcBtzvyb0L/0f+pf+D/1L/4f+NdDiA+BSxPVe1AW4ufz/h/6l/0P/0v+hf+n/0Jeab4kvf26lnTv9lxK7jne0eVcSg3FLVGNFotKld47yRzvSDptylUSkPd917SfSW6EaB4rE1oh1H5mX4mbVsLefSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvl3wAAAP//YuLjig==") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000280)='./file0\x00', 0x4000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x55e}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}], [{@flag='ro'}, {@fowner_lt={'fowner<', r5}}, {@flag='sync'}, {@seclabel}, {@uid_gt={'uid>', r6}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): lave_1) entered disabled state [ 348.254948][T26343] loop0: detected capacity change from 0 to 512 [ 348.263914][T26339] bridge_slave_0: left allmulticast mode [ 348.269596][T26339] bridge_slave_0: left promiscuous mode [ 348.275356][T26339] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.283796][T26343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 348.296355][T26343] ext4 filesystem being mounted at /982/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.319657][T14349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 348.339854][T26347] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7763'. [ 348.456159][T26358] loop0: detected capacity change from 0 to 1024 [ 348.464750][T26358] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.477914][T26358] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 348.487557][T26358] EXT4-fs (loop0): orphan cleanup on readonly fs [ 348.494288][T26358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.7768: Invalid inode table block 0 in block_group 0 [ 348.508805][T26358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 348.518626][T26358] EXT4-fs error (device loop0): ext4_quota_write:7216: inode #3: comm syz.0.7768: mark_inode_dirty error [ 348.531716][T26358] Quota error (device loop0): write_blk: dquota write failed [ 348.539123][T26358] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 348.542940][ T29] audit: type=1326 audit(1721138049.322:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26355 comm="syz.4.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34058bd9 code=0x7fc00000 [ 348.549116][T26358] EXT4-fs error (device loop0): ext4_acquire_dquot:6844: comm syz.0.7768: Failed to acquire dquot type 0 [ 348.572539][ T29] audit: type=1326 audit(1721138049.322:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26355 comm="syz.4.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34058bd9 code=0x7fc00000 [ 348.572564][ T29] audit: type=1326 audit(1721138049.322:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26355 comm="syz.4.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34058bd9 code=0x7fc00000 [ 348.632199][T26358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.7768: Invalid inode table block 0 in block_group 0 [ 348.648862][T26358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 348.660090][T26358] EXT4-fs error (device loop0): ext4_ext_truncate:4432: inode #15: comm syz.0.7768: mark_inode_dirty error [ 348.679696][T26358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.7768: Invalid inode table block 0 in block_group 0 [ 348.695842][T26358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 348.705974][T26358] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 348.715912][T26358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.7768: Invalid inode table block 0 in block_group 0 [ 348.731342][T26358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 348.742390][T26358] EXT4-fs error (device loop0): ext4_truncate:4162: inode #15: comm syz.0.7768: mark_inode_dirty error [ 348.756970][T26358] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 348.767503][T26358] EXT4-fs (loop0): 1 truncate cleaned up [ 348.780948][T26358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.820991][T26358] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (60729!=0) [ 348.846727][T14349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.867146][ T29] audit: type=1326 audit(1721138049.626:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.4.7772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d34058bd9 code=0x0 [ 348.903202][T26373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7775'. [ 348.933112][T26375] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.940426][T26375] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.967737][T26375] bridge_slave_1: left allmulticast mode [ 348.973572][T26375] bridge_slave_1: left promiscuous mode [ 348.979291][T26375] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.987597][T26375] bridge_slave_0: left allmulticast mode [ 348.993352][T26375] bridge_slave_0: left promiscuous mode [ 348.999011][T26375] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.258098][T26385] tipc: Can't bind to reserved service type 0 [ 349.266925][T26385] xt_NFQUEUE: number of queues (65529) out of range (got 95963) [ 349.391641][T26392] loop1: detected capacity change from 0 to 512 [ 349.402850][T26392] EXT4-fs (loop1): 1 truncate cleaned up [ 349.408854][T26392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.433001][T25888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.454456][T26395] hub 9-0:1.0: USB hub found [ 349.459118][T26395] hub 9-0:1.0: 8 ports detected [ 349.488227][T26397] loop1: detected capacity change from 0 to 1024 [ 349.497468][T26397] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.508283][T26397] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 349.518279][T26397] EXT4-fs (loop1): orphan cleanup on readonly fs [ 349.525096][T26397] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7784: Invalid inode table block 0 in block_group 0 [ 349.539518][T26397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 349.549352][T26397] EXT4-fs error (device loop1): ext4_quota_write:7216: inode #3: comm syz.1.7784: mark_inode_dirty error [ 349.563448][T26397] Quota error (device loop1): write_blk: dquota write failed [ 349.570864][T26397] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 349.580801][T26397] EXT4-fs error (device loop1): ext4_acquire_dquot:6844: comm syz.1.7784: Failed to acquire dquot type 0 [ 349.592514][T26397] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7784: Invalid inode table block 0 in block_group 0 [ 349.605265][T26397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 349.614921][T26397] EXT4-fs error (device loop1): ext4_ext_truncate:4432: inode #15: comm syz.1.7784: mark_inode_dirty error [ 349.626561][T26397] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7784: Invalid inode table block 0 in block_group 0 [ 349.639336][T26397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 349.651130][T26397] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 349.659804][T26397] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7784: Invalid inode table block 0 in block_group 0 [ 349.673033][T26397] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 349.682544][T26397] EXT4-fs error (device loop1): ext4_truncate:4162: inode #15: comm syz.1.7784: mark_inode_dirty error [ 349.693742][T26397] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 349.704277][T26397] EXT4-fs (loop1): 1 truncate cleaned up [ 349.710273][T26397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.732966][T26397] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (60729!=0) [ 349.755429][T25888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.985585][T26421] xt_NFQUEUE: number of queues (65529) out of range (got 95963) [ 350.059485][T26433] loop1: detected capacity change from 0 to 1024 [ 350.075593][T26433] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.107627][T26409] chnl_net:caif_netlink_parms(): no params data found [ 350.114698][T26433] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 350.128612][T26433] EXT4-fs (loop1): orphan cleanup on readonly fs [ 350.139985][T26433] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7797: Invalid inode table block 0 in block_group 0 [ 350.169532][T26409] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.176692][T26409] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.185663][T26433] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 350.195219][T26409] bridge_slave_0: entered allmulticast mode [ 350.202293][T26433] EXT4-fs error (device loop1): ext4_quota_write:7216: inode #3: comm syz.1.7797: mark_inode_dirty error [ 350.215095][T26409] bridge_slave_0: entered promiscuous mode [ 350.222988][T26409] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.230137][T26409] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.238214][T26433] Quota error (device loop1): write_blk: dquota write failed [ 350.245695][T26433] EXT4-fs error (device loop1): ext4_acquire_dquot:6844: comm syz.1.7797: Failed to acquire dquot type 0 [ 350.259099][T26409] bridge_slave_1: entered allmulticast mode [ 350.265838][T26409] bridge_slave_1: entered promiscuous mode [ 350.273985][T26433] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7797: Invalid inode table block 0 in block_group 0 [ 350.292501][T26433] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 350.310931][T26409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.320212][T26433] EXT4-fs error (device loop1): ext4_ext_truncate:4432: inode #15: comm syz.1.7797: mark_inode_dirty error [ 350.334988][T26409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.345173][T26433] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7797: Invalid inode table block 0 in block_group 0 [ 350.363387][T26433] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 350.379138][T26433] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 350.392820][T26409] team0: Port device team_slave_0 added [ 350.399455][T26409] team0: Port device team_slave_1 added [ 350.405150][T26433] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.7797: Invalid inode table block 0 in block_group 0 [ 350.428648][T26409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.435618][T26409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.461553][T26409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.467058][T26433] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 350.474626][T26409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.488481][T26409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.514466][T26409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.528091][T26433] EXT4-fs error (device loop1): ext4_truncate:4162: inode #15: comm syz.1.7797: mark_inode_dirty error [ 350.539517][T26433] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 350.559600][T26409] hsr_slave_0: entered promiscuous mode [ 350.573240][T26409] hsr_slave_1: entered promiscuous mode [ 350.579003][T26433] EXT4-fs (loop1): 1 truncate cleaned up [ 350.584749][T26409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.589628][T26433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.616367][T26409] Cannot create hsr debugfs directory [ 350.657988][T26433] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (60729!=0) [ 350.718222][T25888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.768712][T26409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.852467][T26409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.876498][T26442] chnl_net:caif_netlink_parms(): no params data found [ 350.933397][T26409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.996590][T26409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.031882][T26442] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.038949][T26442] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.056911][T26442] bridge_slave_0: entered allmulticast mode [ 351.068172][T26442] bridge_slave_0: entered promiscuous mode [ 351.104161][T26442] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.111254][T26442] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.129647][T26442] bridge_slave_1: entered allmulticast mode [ 351.138616][T26442] bridge_slave_1: entered promiscuous mode [ 351.147161][T26409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.165246][T26409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.178510][T26409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.212077][T26409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.233679][T26442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.248760][T26442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.288260][T26442] team0: Port device team_slave_0 added [ 351.303172][T26442] team0: Port device team_slave_1 added [ 351.323682][T26442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.330691][T26442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.356760][T26442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.368944][T26442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.375928][T26442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.401903][T26442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.440364][T26409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.462146][T26491] hub 9-0:1.0: USB hub found [ 351.473834][T26491] hub 9-0:1.0: 8 ports detected [ 351.484073][T26442] hsr_slave_0: entered promiscuous mode [ 351.492414][T26442] hsr_slave_1: entered promiscuous mode [ 351.498432][T26442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.506005][T26442] Cannot create hsr debugfs directory [ 351.525852][T26409] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.534520][T26493] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 351.562004][T21888] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.569113][T21888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.585275][T21888] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.592365][T21888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.650373][T26409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.660817][T26409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.711701][T26507] loop1: detected capacity change from 0 to 512 [ 351.714206][T26504] serio: Serial port pts0 [ 351.726685][T26507] EXT4-fs: Ignoring removed i_version option [ 351.732743][T26507] EXT4-fs: Ignoring removed nobh option [ 351.748358][T26507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 351.761274][T26442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.771768][T26442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.774714][T26504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7820'. [ 351.794888][T26507] EXT4-fs (loop1): 1 truncate cleaned up [ 351.801331][T26507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.844658][T26442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.855008][T26442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.881899][T26518] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 351.897881][T26409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.906001][T25888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.947911][T26442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.958217][T26442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.969643][T26523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7823'. [ 352.018363][T26442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.028746][T26442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.058348][T26533] loop1: detected capacity change from 0 to 512 [ 352.076416][T26533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.091797][T26533] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.116869][T26533] netlink: 'syz.1.7826': attribute type 4 has an invalid length. [ 352.172372][T26409] veth0_vlan: entered promiscuous mode [ 352.183711][T26442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 352.195196][T26409] veth1_vlan: entered promiscuous mode [ 352.202069][T26442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.226579][T26409] veth0_macvtap: entered promiscuous mode [ 352.233275][T26442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.245871][T26409] veth1_macvtap: entered promiscuous mode [ 352.255019][T26442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.269191][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.279760][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.289603][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.300057][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.310034][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.320486][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.330278][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.340853][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.352924][T26409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.367096][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.377636][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.387441][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.397898][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.407792][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.418338][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.428181][T26409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.438665][T26409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.450393][T26409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.458837][T26543] netlink: 'syz.1.7826': attribute type 17 has an invalid length. [ 352.488843][T26409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.497592][T26409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.506340][T26409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.515039][T26409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.613139][T26548] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.620307][T26548] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.656662][T26442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.666616][T26548] bridge_slave_1: left allmulticast mode [ 352.672440][T26548] bridge_slave_1: left promiscuous mode [ 352.678290][T26548] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.689997][T26548] bridge_slave_0: left allmulticast mode [ 352.695656][T26548] bridge_slave_0: left promiscuous mode [ 352.701757][T26548] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.760234][T26442] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.789372][T21888] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.796509][T21888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.838975][T26442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.849392][T26442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.870884][T21888] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.877968][T21888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.970865][T25888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.011615][T26572] loop1: detected capacity change from 0 to 512 [ 353.030276][T26572] EXT4-fs: Ignoring removed i_version option [ 353.036313][T26572] EXT4-fs: Ignoring removed nobh option [ 353.060815][T26572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 353.070865][T26442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.085484][T26549] chnl_net:caif_netlink_parms(): no params data found [ 353.100608][T26572] EXT4-fs (loop1): 1 truncate cleaned up [ 353.113693][T26572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.196321][T26572] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 353.221628][T26549] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.228702][T26549] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.247667][T25888] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.258188][T26549] bridge_slave_0: entered allmulticast mode [ 353.266233][T26549] bridge_slave_0: entered promiscuous mode [ 353.290412][T26549] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.297585][T26549] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.317160][T26549] bridge_slave_1: entered allmulticast mode [ 353.333807][T26549] bridge_slave_1: entered promiscuous mode [ 353.357781][T26442] veth0_vlan: entered promiscuous mode [ 353.389130][T26442] veth1_vlan: entered promiscuous mode [ 353.399886][T26549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.423473][T26549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.445512][T26442] veth0_macvtap: entered promiscuous mode [ 353.474239][T26549] team0: Port device team_slave_0 added [ 353.488253][T26549] team0: Port device team_slave_1 added [ 353.504872][T26442] veth1_macvtap: entered promiscuous mode [ 353.534850][T26549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.541818][T26549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.567789][T26549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.579943][T26549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.586929][T26549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.612975][T26549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.631385][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.641849][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.651669][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.662107][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.671968][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.682396][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.692218][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.702673][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.712486][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.723418][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.736325][T26442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.765633][T26549] hsr_slave_0: entered promiscuous mode [ 353.771674][T26549] hsr_slave_1: entered promiscuous mode [ 353.778136][T26549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.786338][T26549] Cannot create hsr debugfs directory [ 353.793652][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.804141][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.814026][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.824491][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.834305][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.844792][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.854632][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.865163][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.875092][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.885569][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.898373][T26442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.925734][T26442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.934442][T26442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.943225][T26442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.952200][T26442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.038710][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 354.038724][ T29] audit: type=1400 audit(1721138054.405:6729): avc: denied { listen } for pid=26599 comm="syz.0.7837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.159102][T26549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.222518][T26549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.316393][T26549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.405249][T26549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.476407][T26549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.496076][T26549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.518228][T26549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.526936][T26549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.639047][T26549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.670048][T26549] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.695293][T21936] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.702462][T21936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.729916][T21936] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.736989][T21936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.760701][T26549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.860844][T26549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.950770][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7838'. [ 355.011437][T26549] veth0_vlan: entered promiscuous mode [ 355.031062][T26549] veth1_vlan: entered promiscuous mode [ 355.045556][T26618] loop0: detected capacity change from 0 to 512 [ 355.086904][T26549] veth0_macvtap: entered promiscuous mode [ 355.110396][T26549] veth1_macvtap: entered promiscuous mode [ 355.129192][T26618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.150121][T26618] ext4 filesystem being mounted at /1010/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.153458][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.171066][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.180889][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.191353][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.191396][T26627] loop3: detected capacity change from 0 to 1024 [ 355.201199][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.201216][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.201231][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.201244][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.201258][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.201270][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.269056][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.279458][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.289555][T26627] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 355.292262][T26549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.300436][T26627] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 355.323610][T26618] netlink: 'syz.0.7839': attribute type 4 has an invalid length. [ 355.335640][T26627] jbd2_journal_init_inode: Cannot locate journal superblock [ 355.342928][T26627] EXT4-fs (loop3): Could not load journal inode [ 355.374572][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.385044][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.394922][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.405458][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.415335][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.425759][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.435665][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.446100][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.455930][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.466348][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.476211][T26549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.486618][T26549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.524248][T26627] loop3: detected capacity change from 0 to 1024 [ 355.531591][T26627] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 355.617926][T26549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.664847][T26549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.673622][T26549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.682453][T26549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.691207][T26549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.759736][T26633] loop3: detected capacity change from 0 to 164 [ 355.813810][T26633] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 355.825693][T26633] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 355.897874][T26630] netlink: 'syz.0.7839': attribute type 17 has an invalid length. [ 356.042323][T14349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.150752][T26640] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 356.185705][T26638] loop0: detected capacity change from 0 to 8192 [ 356.199267][ T29] audit: type=1400 audit(1721138056.388:6730): avc: denied { mounton } for pid=26637 comm="syz.0.7844" path="/1012/file0/file0" dev="hugetlbfs" ino=95360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 356.326118][T26650] loop0: detected capacity change from 0 to 2048 [ 356.357933][T26650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.404689][T14349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.447904][T26655] loop0: detected capacity change from 0 to 256 [ 356.637178][T26661] bridge_slave_1: left allmulticast mode [ 356.642848][T26661] bridge_slave_1: left promiscuous mode [ 356.648578][T26661] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.667720][T26661] bridge_slave_0: left allmulticast mode [ 356.673447][T26661] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.080514][T26675] lo speed is unknown, defaulting to 1000 [ 357.090293][T26675] lo speed is unknown, defaulting to 1000 [ 357.102731][T26675] lo speed is unknown, defaulting to 1000 [ 357.120632][T26675] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 357.141735][T26675] lo speed is unknown, defaulting to 1000 [ 357.155643][T26675] lo speed is unknown, defaulting to 1000 [ 357.172334][T26678] loop3: detected capacity change from 0 to 256 [ 357.177389][T26675] lo speed is unknown, defaulting to 1000 [ 357.184654][T26675] lo speed is unknown, defaulting to 1000 [ 357.217334][T26675] lo speed is unknown, defaulting to 1000 [ 357.235873][T26680] netlink: 'syz.2.7862': attribute type 10 has an invalid length. [ 357.268247][T26680] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 357.281747][T26680] team0: Failed to send options change via netlink (err -105) [ 357.289275][T26680] team0: Port device netdevsim1 added [ 357.297338][T26675] lo speed is unknown, defaulting to 1000 [ 357.312975][T26675] lo speed is unknown, defaulting to 1000 [ 357.319933][T26675] lo speed is unknown, defaulting to 1000 [ 357.325936][T26675] lo speed is unknown, defaulting to 1000 [ 357.333576][T26675] lo speed is unknown, defaulting to 1000 [ 357.361290][T26675] lo speed is unknown, defaulting to 1000 [ 357.389285][T26686] loop3: detected capacity change from 0 to 2048 [ 357.421776][T26686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.463233][T26442] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.982256][ T29] audit: type=1400 audit(1721138058.039:6731): avc: denied { map } for pid=26715 comm="syz.4.7877" path="socket:[94566]" dev="sockfs" ino=94566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.087859][T26722] netlink: 'syz.4.7880': attribute type 3 has an invalid length. [ 358.096278][ T29] audit: type=1326 audit(1721138058.141:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26717 comm="syz.3.7878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19b9e82bd9 code=0x0 [ 358.493037][T26736] loop0: detected capacity change from 0 to 256 [ 358.607870][T26742] netlink: 'syz.4.7888': attribute type 4 has an invalid length. [ 358.801457][T26745] netlink: 'syz.4.7888': attribute type 17 has an invalid length. [ 358.910088][T26751] netlink: 'syz.2.7892': attribute type 3 has an invalid length. [ 359.207315][ T29] audit: type=1400 audit(1721138059.174:6733): avc: denied { listen } for pid=26775 comm="syz.3.7904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.275950][T26778] netlink: 'syz.0.7905': attribute type 3 has an invalid length. [ 359.410898][ T29] audit: type=1326 audit(1721138059.349:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26779 comm="syz.0.7906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f400dd5dbd9 code=0x0 [ 359.527622][T26788] netlink: 308 bytes leftover after parsing attributes in process `syz.2.7907'. [ 359.700404][T26794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7909'. [ 359.734681][T26794] vlan2: entered promiscuous mode [ 359.739768][T26794] bond0: entered promiscuous mode [ 359.744792][T26794] bond_slave_0: entered promiscuous mode [ 359.750571][T26794] bond_slave_1: entered promiscuous mode [ 359.878019][T26800] siw: device registration error -23 [ 360.073052][T26808] loop2: detected capacity change from 0 to 512 [ 360.093873][T26808] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 360.105392][T26808] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 360.115463][T26808] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.7917: Corrupt directory, running e2fsck is recommended [ 360.208472][T26808] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 360.254682][T26808] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.7917: corrupted in-inode xattr: invalid ea_ino [ 360.334216][T26808] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.7917: couldn't read orphan inode 15 (err -117) [ 360.349492][T26808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.365785][T26808] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 360.377418][T26808] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 360.387537][T26808] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.7917: Corrupt directory, running e2fsck is recommended [ 360.406635][T26808] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 360.418187][T26808] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 360.428259][T26808] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.7917: Corrupt directory, running e2fsck is recommended [ 360.444478][T26808] EXT4-fs error (device loop2): ext4_find_dest_de:2066: inode #2: block 3: comm syz.2.7917: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 360.654800][T26832] loop0: detected capacity change from 0 to 2048 [ 360.701368][T26832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.724989][ T29] audit: type=1400 audit(1721138060.567:6735): avc: denied { relabelfrom } for pid=26838 comm="syz.4.7927" name="" dev="pipefs" ino=95736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 360.767356][T26832] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7926'. [ 360.980669][T26549] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.178952][ T29] audit: type=1400 audit(1721138060.982:6736): avc: denied { write } for pid=26849 comm="syz.4.7932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 361.322544][T26854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7933'. [ 361.654714][T14349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.739126][T26867] netlink: 308 bytes leftover after parsing attributes in process `syz.3.7939'. [ 361.794138][T26869] loop2: detected capacity change from 0 to 128 [ 361.818839][T26869] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.851403][T26869] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 361.988590][T26549] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.009682][T26876] loop3: detected capacity change from 0 to 512 [ 362.024554][T26876] ext4: Unknown parameter 'subj_role' [ 362.173209][T26883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7946'. [ 362.196189][T26883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7946'. [ 362.314865][T26899] syzkaller1: entered promiscuous mode [ 362.320440][T26899] syzkaller1: entered allmulticast mode [ 362.451154][T26901] netlink: 308 bytes leftover after parsing attributes in process `syz.2.7952'. [ 362.649244][ T29] audit: type=1400 audit(1721138062.338:6737): avc: denied { listen } for pid=26908 comm="syz.2.7957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.688141][T26918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7961'. [ 362.716323][T26918] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7961'. [ 362.814378][T26928] syzkaller1: entered promiscuous mode [ 362.819891][T26928] syzkaller1: entered allmulticast mode [ 362.846150][T26926] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7964'. [ 363.005168][T26933] loop3: detected capacity change from 0 to 512 [ 363.030303][T26933] ext4: Unknown parameter 'subj_role' [ 363.081337][T26935] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 363.215470][T16903] bond0: (slave syz_tun): Releasing backup interface [ 363.381006][T26943] lo speed is unknown, defaulting to 1000 [ 363.531112][T26943] chnl_net:caif_netlink_parms(): no params data found [ 363.682620][T22572] dvmrp1 (unregistering): left allmulticast mode [ 363.802713][T22572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.822778][T22572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.832109][T22572] bond0 (unregistering): Released all slaves [ 363.846453][T22572] bond1 (unregistering): Released all slaves [ 363.865892][T22572] bond2 (unregistering): Released all slaves [ 363.887468][T22572] bond3 (unregistering): (slave lo): Releasing active interface [ 363.911581][T22572] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 363.931748][T22572] bond3 (unregistering): Released all slaves [ 363.975768][ T9] lo speed is unknown, defaulting to 1000 [ 363.986445][ T8] lo speed is unknown, defaulting to 1000 [ 363.997180][T26943] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.004281][T26943] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.012935][T26943] bridge_slave_0: entered allmulticast mode [ 364.019680][T26943] bridge_slave_0: entered promiscuous mode [ 364.026701][T26943] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.033833][T26943] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.034472][T26943] bridge_slave_1: entered allmulticast mode [ 364.047593][T26943] bridge_slave_1: entered promiscuous mode [ 364.075913][T22572] tipc: Left network mode [ 364.077572][T26943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.090804][T26943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.101117][T26967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7975'. [ 364.127290][T22572] IPVS: stopping master sync thread 21041 ... [ 364.170377][T22572] hsr_slave_0: left promiscuous mode [ 364.176122][T22572] 0·: left promiscuous mode [ 364.194372][T22572] batman_adv: batadv0: Interface deactivated: team0 [ 364.201078][T22572] batman_adv: batadv0: Removing interface: team0 [ 364.215205][T22572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.225266][T26973] program syz.3.7979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.241204][T22572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.364509][T22572] team0 (unregistering): Port device team_slave_1 removed [ 364.388674][T22572] team0 (unregistering): Port device team_slave_0 removed [ 364.395822][T26984] loop3: detected capacity change from 0 to 256 [ 364.466070][T26943] team0: Port device team_slave_0 added [ 364.475389][T26943] team0: Port device team_slave_1 added [ 364.514968][T26943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.522016][T26943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.522196][T26994] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.547961][T26943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.582714][T26943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.589663][T26943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.617127][T26943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.639789][T26997] loop2: detected capacity change from 0 to 512 [ 364.658404][ T29] audit: type=1326 audit(1721138064.202:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.4.7986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a946bd9 code=0x0 [ 364.720572][T26997] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.7988: corrupted in-inode xattr: invalid ea_ino [ 364.722322][T26943] hsr_slave_0: entered promiscuous mode [ 364.743925][T26943] hsr_slave_1: entered promiscuous mode [ 364.759459][T26943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.779350][T26997] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.7988: couldn't read orphan inode 15 (err -117) [ 364.791229][T26943] Cannot create hsr debugfs directory [ 364.887175][T26997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.984092][T26549] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.096324][T26978] chnl_net:caif_netlink_parms(): no params data found [ 365.127492][T27011] program syz.2.7990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.223708][T26978] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.230789][T26978] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.255108][T26978] bridge_slave_0: entered allmulticast mode [ 365.261801][T26978] bridge_slave_0: entered promiscuous mode [ 365.271975][T26978] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.279076][T26978] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.286331][T26978] bridge_slave_1: entered allmulticast mode [ 365.292680][T26978] bridge_slave_1: entered promiscuous mode [ 365.316630][T26978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.327294][T26978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.375495][T26978] team0: Port device team_slave_0 added [ 365.392982][T26978] team0: Port device team_slave_1 added [ 365.408253][T26943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.472167][T26943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.485622][T26943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.513502][T26978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.520456][T26978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.546934][T26978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.567587][T26978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.574549][T26978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.600518][T26978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.653983][T26943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.707606][T26978] hsr_slave_0: entered promiscuous mode [ 365.721643][T26978] hsr_slave_1: entered promiscuous mode [ 365.741703][T26978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.749258][T26978] Cannot create hsr debugfs directory [ 365.839344][T22572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.839678][T27034] loop2: detected capacity change from 0 to 128 [ 365.885071][T27034] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.916663][T26943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.936315][T27034] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 365.983790][T22572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.069641][T26943] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.080829][T22572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.144953][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 366.198626][T22572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.243714][T21888] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.250821][T21888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.259310][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 366.339862][T27020] chnl_net:caif_netlink_parms(): no params data found [ 366.352784][T21890] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.359864][T21890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.377930][T26549] EXT4-fs error (device loop2): ext4_empty_dir:3071: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 366.513046][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 366.573630][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 366.649262][T26549] EXT4-fs error (device loop2): ext4_empty_dir:3071: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 366.668608][T22572] bond0 (unregistering): left promiscuous mode [ 366.674922][T22572] bond_slave_0: left promiscuous mode [ 366.680376][T22572] bond_slave_1: left promiscuous mode [ 366.716521][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 366.730792][T22572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.753362][T22572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.774937][T22572] bond0 (unregistering): Released all slaves [ 366.793062][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 366.822479][T26978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.857256][T26549] EXT4-fs error (device loop2): ext4_empty_dir:3071: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 366.889019][T27020] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.896364][T27020] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.927628][T27020] bridge_slave_0: entered allmulticast mode [ 366.934183][T26549] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 366.951409][T27020] bridge_slave_0: entered promiscuous mode [ 366.969885][T27020] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.977001][T27020] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.000718][T27020] bridge_slave_1: entered allmulticast mode [ 367.018052][T27020] bridge_slave_1: entered promiscuous mode [ 367.039559][T22572] hsr_slave_0: left promiscuous mode [ 367.049369][T22572] hsr_slave_1: left promiscuous mode [ 367.055362][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.062832][T22572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.093330][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.100847][T22572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.141662][T22572] veth1_macvtap: left promiscuous mode [ 367.147195][T22572] veth0_macvtap: left promiscuous mode [ 367.152760][T22572] veth1_vlan: left promiscuous mode [ 367.158052][T22572] veth0_vlan: left promiscuous mode [ 367.432619][T22572] team0 (unregistering): Port device team_slave_1 removed [ 367.464913][T22572] team0 (unregistering): Port device team_slave_0 removed [ 367.534920][T26978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.621319][T26943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.648623][T27020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.670262][T26978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.703324][T27020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.790709][T26978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.823047][T26549] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.823424][T27020] team0: Port device team_slave_0 added [ 367.866618][T27020] team0: Port device team_slave_1 added [ 367.909761][T27020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.916768][T27020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.942675][T27020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.037417][T26943] veth0_vlan: entered promiscuous mode [ 368.050328][T27020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.057280][T27020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.083302][T27020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.148314][T26943] veth1_vlan: entered promiscuous mode [ 368.154427][T26978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.192333][T26978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.203466][T26978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.263867][T26943] veth0_macvtap: entered promiscuous mode [ 368.307890][T26978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.345102][T27020] hsr_slave_0: entered promiscuous mode [ 368.375382][T27020] hsr_slave_1: entered promiscuous mode [ 368.381290][T27020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.407468][T27020] Cannot create hsr debugfs directory [ 368.467012][T26943] veth1_macvtap: entered promiscuous mode [ 368.490334][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.500835][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.510665][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.521075][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.530923][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.541418][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.551364][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.561819][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.571784][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.582213][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.592038][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.602479][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.614691][T26943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.627838][T22572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.690379][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.700947][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.710846][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.721255][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.731096][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.741518][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.751380][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.761825][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.771631][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.782156][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.791974][T26943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.802389][T26943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.817491][T26943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.894989][T22572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.952694][T26943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.961498][T26943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.970247][T26943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.979058][T26943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.050138][T26978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.136908][T22572] team0: Port device netdevsim1 removed [ 369.143870][T22572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.285824][T26978] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.300162][T22572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.337593][T27053] chnl_net:caif_netlink_parms(): no params data found [ 369.357483][T21895] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.364586][T21895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.388521][T21895] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.395600][T21895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.587020][T22572] bridge_slave_1: left allmulticast mode [ 369.592714][T22572] bridge_slave_1: left promiscuous mode [ 369.598321][T22572] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.632937][T22572] bridge_slave_0: left allmulticast mode [ 369.638596][T22572] bridge_slave_0: left promiscuous mode [ 369.644334][T22572] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.914322][T22572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.937864][T22572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.959566][T22572] bond0 (unregistering): Released all slaves [ 369.969801][ T29] audit: type=1326 audit(1721138069.100:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.0.8000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc782b7bbd9 code=0x0 [ 370.009938][T27053] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.017130][T27053] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.052443][T27053] bridge_slave_0: entered allmulticast mode [ 370.068997][T27053] bridge_slave_0: entered promiscuous mode [ 370.090981][T22572] hsr_slave_0: left promiscuous mode [ 370.101170][T22572] hsr_slave_1: left promiscuous mode [ 370.118343][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.125816][T22572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.164228][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.171636][T22572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.199590][T22572] veth1_macvtap: left promiscuous mode [ 370.205069][T22572] veth0_macvtap: left promiscuous mode [ 370.210617][T22572] veth1_vlan: left promiscuous mode [ 370.215963][T22572] veth0_vlan: left promiscuous mode [ 370.420089][T22572] team0 (unregistering): Port device team_slave_1 removed [ 370.441562][T22572] team0 (unregistering): Port device team_slave_0 removed [ 370.542918][T27053] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.549983][T27053] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.576868][T27053] bridge_slave_1: entered allmulticast mode [ 370.596200][T27053] bridge_slave_1: entered promiscuous mode [ 370.642454][T26978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.665686][T27053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.698547][T27053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.760104][T27053] team0: Port device team_slave_0 added [ 370.766733][T27053] team0: Port device team_slave_1 added [ 370.838214][T27053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.845225][T27053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.871178][T27053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.943241][T26978] veth0_vlan: entered promiscuous mode [ 370.953690][T27020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.981244][T26978] veth1_vlan: entered promiscuous mode [ 370.987668][T27020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.014008][T27020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.026029][T27053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.033101][T27053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.059080][T27053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.126548][T27020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.174951][T27053] hsr_slave_0: entered promiscuous mode [ 371.194654][T27053] hsr_slave_1: entered promiscuous mode [ 371.200745][T27053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.214905][T27053] Cannot create hsr debugfs directory [ 371.238513][T27093] netlink: 'syz.0.8004': attribute type 10 has an invalid length. [ 371.269172][T27093] veth0_macvtap: left promiscuous mode [ 371.305194][T27093] veth0_macvtap: entered promiscuous mode [ 371.323450][T27093] team0: Device macvtap0 failed to register rx_handler [ 371.330994][T27093] veth0_macvtap: left promiscuous mode [ 371.391639][T26978] veth0_macvtap: entered promiscuous mode [ 371.431785][T26978] veth1_macvtap: entered promiscuous mode [ 371.501440][ T29] audit: type=1400 audit(1721138070.511:6740): avc: denied { relabelfrom } for pid=27095 comm="syz.0.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 371.521580][ T29] audit: type=1400 audit(1721138070.511:6741): avc: denied { relabelto } for pid=27095 comm="syz.0.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 371.547269][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.557826][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.567678][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.578108][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.588124][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.598613][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.608445][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.618904][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.628715][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.639215][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.649027][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.659462][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.812363][T26978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.888001][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.898484][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.908357][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.918803][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.928664][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.939105][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.948924][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.959337][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.969219][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.979650][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.989510][T26978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.999927][T26978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.139305][T26978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.197299][T27020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.220078][T26978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.228945][T26978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.237725][T26978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.246464][T26978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.256818][T27109] syz.0.8010[27109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.256863][T27109] syz.0.8010[27109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.324329][T27020] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.371121][T21895] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.378273][T21895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.409910][T21895] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.416974][T21895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.476307][T27114] __nla_validate_parse: 1 callbacks suppressed [ 372.476324][T27114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7980'. [ 372.500556][T27020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.510955][T27020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.584061][T27117] netlink: 'syz.0.8012': attribute type 10 has an invalid length. [ 372.613540][T27117] veth0_macvtap: entered promiscuous mode [ 372.636935][T27117] team0: Device macvtap0 failed to register rx_handler [ 372.657185][T27117] veth0_macvtap: left promiscuous mode [ 372.707110][T27020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.799233][T27053] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.838327][T27053] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.878683][T27053] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.901628][T27053] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.940051][T27140] loop1: detected capacity change from 0 to 512 [ 372.958564][T27140] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 372.994059][T27145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8018'. [ 373.070310][T27140] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.8015: iget: bad i_size value: -67835469387268086 [ 373.159291][T27020] veth0_vlan: entered promiscuous mode [ 373.181952][T27140] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.8015: couldn't read orphan inode 15 (err -117) [ 373.223087][T27053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.241073][T27020] veth1_vlan: entered promiscuous mode [ 373.255043][T27156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8021'. [ 373.273517][T27020] veth0_macvtap: entered promiscuous mode [ 373.305256][T27020] veth1_macvtap: entered promiscuous mode [ 373.325040][T27140] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.353420][T27053] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.366513][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.377046][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.386972][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.397399][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.407278][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.416020][T27140] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.417758][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.437819][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.448315][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.458106][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.468529][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.478370][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.488792][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.498607][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.509027][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.546141][T26978] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 373.595901][T27020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.614212][T21895] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.621272][T21895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.639393][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.650389][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.660232][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.670838][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.680688][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.691105][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.700916][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.711392][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.721211][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.731641][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.741505][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.752180][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.762060][T27020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.772476][T27020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.813632][T27162] loop0: detected capacity change from 0 to 8192 [ 373.820726][ T29] audit: type=1400 audit(1721138072.652:6742): avc: denied { append } for pid=27161 comm="syz.0.8024" name="loop0" dev="devtmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.860919][T27020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.892418][ T29] audit: type=1400 audit(1721138072.652:6743): avc: denied { map } for pid=27161 comm="syz.0.8024" path="/22/bus" dev="devtmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.915231][ T29] audit: type=1400 audit(1721138072.652:6744): avc: denied { execute } for pid=27161 comm="syz.0.8024" path="/22/bus" dev="devtmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.953479][T27053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.963929][T27053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.975997][ T29] audit: type=1400 audit(1721138072.716:6745): avc: denied { compute_member } for pid=27161 comm="syz.0.8024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 373.999875][T21936] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.007062][T21936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.076131][T27020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.084897][T27020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.093650][T27020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.102491][T27020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.126243][T27172] loop0: detected capacity change from 0 to 512 [ 374.152886][T27172] EXT4-fs: dax option not supported [ 374.173653][T27172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8027'. [ 374.230772][T27053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.345978][T27192] netlink: 'syz.4.8031': attribute type 21 has an invalid length. [ 374.370698][T27192] netlink: 'syz.4.8031': attribute type 6 has an invalid length. [ 374.438792][T27053] veth0_vlan: entered promiscuous mode [ 374.471189][T27053] veth1_vlan: entered promiscuous mode [ 374.536637][T27053] veth0_macvtap: entered promiscuous mode [ 374.565591][T27053] veth1_macvtap: entered promiscuous mode [ 374.591602][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.602099][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.611920][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.622496][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.632581][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.643042][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.653014][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.663474][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.673578][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.684182][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.693980][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.704498][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.714320][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.724789][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.734599][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.745080][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.757415][T27053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.769953][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.780493][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.790506][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.800969][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.810906][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.821323][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.831136][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.841678][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.851935][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.862380][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.872209][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.882899][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.892719][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.903136][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.913025][T27053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.922269][ T29] audit: type=1400 audit(1721138073.657:6746): avc: denied { setopt } for pid=27216 comm="syz.4.8039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.923439][T27053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.926003][T27053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.969943][T27053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.979035][T27053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.988021][T27053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.996713][T27053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.329949][T27235] netlink: 'syz.0.8044': attribute type 10 has an invalid length. [ 375.337847][T27235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8044'. [ 375.387273][T27235] bridge0: port 3(syz_tun) entered blocking state [ 375.393799][T27235] bridge0: port 3(syz_tun) entered disabled state [ 375.444871][T27235] syz_tun: entered allmulticast mode [ 375.466641][T27235] syz_tun: entered promiscuous mode [ 375.494053][T27235] bridge0: port 3(syz_tun) entered blocking state [ 375.500586][T27235] bridge0: port 3(syz_tun) entered forwarding state [ 375.504291][T27240] loop1: detected capacity change from 0 to 1024 [ 375.567464][T27240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.637725][T27240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 375.772545][T27240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.891837][T27245] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 375.948158][T26978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.959247][T27245] smc: adding net device ip6gretap0 with user defined pnetid SYZ1 [ 376.042205][T27245] chnl_net:caif_netlink_parms(): no params data found [ 376.152999][T27245] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.160306][T27245] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.171138][T27245] bridge_slave_0: entered allmulticast mode [ 376.180200][T27245] bridge_slave_0: entered promiscuous mode [ 376.180493][T27274] dccp_invalid_packet: P.Data Offset(0) too small [ 376.190707][T27245] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.199458][T27245] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.213633][T27245] bridge_slave_1: entered allmulticast mode [ 376.222574][T27245] bridge_slave_1: entered promiscuous mode [ 376.269034][T27245] bond_slave_0: entered promiscuous mode [ 376.274741][T27245] bond_slave_0: entered allmulticast mode [ 376.304247][T27245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.331472][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.338896][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.346320][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.353732][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.361239][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.368643][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.376144][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.383564][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.391044][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.398645][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.406071][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.410336][T27245] bond_slave_1: entered promiscuous mode [ 376.413531][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.419093][T27245] bond_slave_1: entered allmulticast mode [ 376.426397][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.439581][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.447347][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.454844][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.462326][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.469724][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.477149][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.484537][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.491940][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.499376][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.503596][T27245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.506837][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.506859][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.506878][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.506896][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.545508][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.552910][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.560313][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.567689][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.575086][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.582494][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.590151][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 376.662528][T27291] 9pnet: Could not find request transport: gdìrfdno=…“Ë!@BDœ`¯?P"Oñœ`¤TM\½ì<çävÒ&ÿ¶*9qêÎcž… [ 376.701659][T27245] team0: Port device team_slave_0 added [ 376.722054][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 376.726510][T27245] team0: Port device team_slave_1 added [ 376.789265][T27296] loop1: detected capacity change from 0 to 128 [ 376.808882][T27245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.815892][T27245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.841846][T27245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.869065][T27296] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.906455][T27297] syzkaller1: entered promiscuous mode [ 376.912017][T27297] syzkaller1: entered allmulticast mode [ 376.944488][T27296] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.980465][T27245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.987451][T27245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.013461][T27245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.080004][ T29] audit: type=1400 audit(1721138075.659:6747): avc: denied { search } for pid=27300 comm="syz.4.8064" name="/" dev="configfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 377.122344][T26978] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.162940][T27305] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 377.174010][T27245] hsr_slave_0: entered promiscuous mode [ 377.188525][T27245] hsr_slave_1: entered promiscuous mode [ 377.208369][T27245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.216327][T27245] Cannot create hsr debugfs directory [ 377.263866][T27309] dccp_invalid_packet: P.Data Offset(0) too small [ 377.348655][T27317] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.355953][T27317] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.358236][T27319] 9pnet: Could not find request transport: gdìrfdno=…“Ë!@BDœ`¯?P"Oñœ`¤TM\½ì<çävÒ&ÿ¶*9qêÎcž… [ 377.387191][T27312] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 377.482292][T27245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.548632][T27326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8073'. [ 377.571319][T27245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.607641][T27327] tipc: Started in network mode [ 377.612657][T27327] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 377.625008][ T29] audit: type=1400 audit(1721138076.139:6748): avc: denied { sys_chroot } for pid=27329 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 377.646400][ T29] audit: type=1400 audit(1721138076.139:6749): avc: denied { setgid } for pid=27329 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 377.667588][ T29] audit: type=1400 audit(1721138076.139:6750): avc: denied { setuid } for pid=27329 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 377.688553][ T29] audit: type=1400 audit(1721138076.139:6751): avc: denied { setrlimit } for pid=27329 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 377.708199][ T29] audit: type=1326 audit(1721138076.148:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27324 comm="syz.2.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f43718bd9 code=0x7ffc0000 [ 377.731824][ T29] audit: type=1326 audit(1721138076.148:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27324 comm="syz.2.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f43718bd9 code=0x7ffc0000 [ 377.755420][ T29] audit: type=1326 audit(1721138076.148:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27324 comm="syz.2.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f43718bd9 code=0x7ffc0000 [ 377.778965][ T29] audit: type=1326 audit(1721138076.148:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27324 comm="syz.2.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f43718bd9 code=0x7ffc0000 [ 377.802465][ T29] audit: type=1326 audit(1721138076.148:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27324 comm="syz.2.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f43718bd9 code=0x7ffc0000 [ 377.828931][T27327] tipc: Enabling of bearer rejected, failed to enable media [ 377.860400][T27333] loop0: detected capacity change from 0 to 128 [ 377.865324][T27245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.914894][T27333] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.002164][T27245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.012766][T27333] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 378.101365][T27343] loop2: detected capacity change from 0 to 512 [ 378.148418][T27245] netdevsim netdevsim3 netdevsim0: renamed from eth1 [ 378.155538][T26943] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.176263][T27343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.192252][T27245] netdevsim netdevsim3 netdevsim1: renamed from eth2 [ 378.213057][T27245] netdevsim netdevsim3 netdevsim2: renamed from eth3 [ 378.232796][T27245] netdevsim netdevsim3 netdevsim3: renamed from eth4 [ 378.298378][T27351] loop1: detected capacity change from 0 to 512 [ 378.338299][T27351] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 378.405630][T27356] netlink: 'syz.0.8084': attribute type 4 has an invalid length. [ 378.414274][T27351] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.8082: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 378.437905][T27053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.494059][T27357] netlink: 'syz.0.8084': attribute type 4 has an invalid length. [ 378.542273][T27351] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.8082: couldn't read orphan inode 15 (err -117) [ 378.599348][T27363] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 378.608319][T27245] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.654673][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.661749][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.684418][T27351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.710070][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.717159][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.731767][T27369] loop2: detected capacity change from 0 to 512 [ 378.759756][T27351] ext2 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.796493][T27369] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 378.808020][T27369] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 378.818155][T27369] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.8089: Corrupt directory, running e2fsck is recommended [ 378.881866][T27369] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 378.951635][T27369] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.8089: corrupted in-inode xattr: invalid ea_ino [ 379.042934][T27369] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.8089: couldn't read orphan inode 15 (err -117) [ 379.080692][T26978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.158937][T27245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.186458][T27369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.218654][T27369] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 379.230343][T27369] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 379.240489][T27369] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.8089: Corrupt directory, running e2fsck is recommended [ 379.335874][T27394] netlink: 'syz.0.8096': attribute type 4 has an invalid length. [ 379.390106][T27394] netlink: 'syz.0.8096': attribute type 4 has an invalid length. [ 379.398522][T27397] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 379.443739][T27369] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 379.455325][T27369] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 379.465662][T27369] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.8089: Corrupt directory, running e2fsck is recommended [ 379.514543][T27245] veth0_vlan: entered promiscuous mode [ 379.546615][T27245] veth1_vlan: entered promiscuous mode [ 379.620438][T27245] veth0_macvtap: entered promiscuous mode [ 379.632591][T27369] EXT4-fs error (device loop2): ext4_find_dest_de:2066: inode #2: block 3: comm syz.2.8089: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 379.664126][T27245] veth1_macvtap: entered promiscuous mode [ 379.694772][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.705286][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.715118][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.725709][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.735839][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.746376][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.756221][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.766682][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.776491][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.786930][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.796763][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.807321][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.817134][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.827818][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.837734][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.848154][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.858079][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.868601][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.968078][T27245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.979988][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.990528][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.000635][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.011337][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.021210][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.031630][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.041451][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.051892][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.061703][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.072126][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.081977][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.093271][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.103536][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.114016][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.123839][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.134307][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.144146][T27245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.154593][T27245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.192038][T27245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.230123][T27245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.238914][T27245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.247696][T27245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.256726][T27245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.293181][T27245] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 380.321241][T27053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.346869][T27245] wireguard: wg0: Could not create IPv6 socket [ 380.359437][T27245] wireguard: wg1: Could not create IPv6 socket [ 380.369398][T27245] wireguard: wg2: Could not create IPv6 socket [ 380.468061][T27431] loop3: detected capacity change from 0 to 136 [ 380.529707][T27435] netlink: 'syz.0.8108': attribute type 10 has an invalid length. [ 380.534078][T27436] loop1: detected capacity change from 0 to 512 [ 380.537678][T27435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8108'. [ 380.608258][T27441] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 380.649362][T27436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.709670][T27449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8113'. [ 380.736834][T27436] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.755112][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8113'. [ 380.806847][T27460] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.8117'. [ 380.816089][T27460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8117'. [ 380.871895][T27453] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 381.093710][T26978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.422575][T27499] netlink: 'syz.1.8124': attribute type 4 has an invalid length. [ 381.516941][T27505] netlink: 'syz.1.8124': attribute type 4 has an invalid length. [ 381.654588][T27517] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8130'. [ 381.725321][T27528] loop0: detected capacity change from 0 to 512 [ 381.748558][T27529] netlink: 'syz.2.8128': attribute type 4 has an invalid length. [ 381.782803][T27528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.801805][T27528] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.870804][T27528] loop0: detected capacity change from 512 to 0 [ 381.877872][T27528] syz.0.8135: attempt to access beyond end of device [ 381.877872][T27528] loop0: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 381.903815][T27536] netlink: 'syz.2.8128': attribute type 4 has an invalid length. [ 381.936023][T27528] EXT4-fs error (device loop0): __ext4_find_entry:1640: inode #2: comm syz.0.8135: reading directory lblock 0 [ 381.979501][T27528] syz.0.8135: attempt to access beyond end of device [ 381.979501][T27528] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 381.992816][T27528] buffer_io_error: 14 callbacks suppressed [ 381.992842][T27528] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.030341][T27528] EXT4-fs (loop0): I/O error while writing superblock [ 382.115322][T26943] syz-executor: attempt to access beyond end of device [ 382.115322][T26943] loop0: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 382.167669][T26943] syz-executor: attempt to access beyond end of device [ 382.167669][T26943] loop0: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 382.209720][T26943] syz-executor: attempt to access beyond end of device [ 382.209720][T26943] loop0: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 382.237640][T26943] syz-executor: attempt to access beyond end of device [ 382.237640][T26943] loop0: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 382.279139][T27545] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (253) [ 382.282592][T26943] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 382.328835][T26943] syz-executor: attempt to access beyond end of device [ 382.328835][T26943] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 382.342376][T26943] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.369287][T26943] EXT4-fs (loop0): I/O error while writing superblock [ 382.376174][T26943] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 382.400018][T26943] syz-executor: attempt to access beyond end of device [ 382.400018][T26943] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 382.413456][T26943] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.444744][T26943] EXT4-fs (loop0): I/O error while writing superblock [ 382.451610][T26943] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 382.474904][T26943] syz-executor: attempt to access beyond end of device [ 382.474904][T26943] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 382.488400][T26943] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.521210][T26943] EXT4-fs (loop0): I/O error while writing superblock [ 382.542504][T22572] kworker/u8:18: attempt to access beyond end of device [ 382.542504][T22572] loop0: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 382.580317][T27547] Invalid ELF header magic: != ELF [ 382.580348][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 382.580359][ T29] audit: type=1400 audit(1721138080.733:6768): avc: denied { module_load } for pid=27546 comm="syz.1.8141" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 382.585689][T22572] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:18: unable to read itable block [ 382.621084][T27550] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8143'. [ 382.664340][T22572] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.683619][T22572] EXT4-fs (loop0): I/O error while writing superblock [ 382.690836][T22572] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:18: unable to read itable block [ 382.715584][T27552] loop3: detected capacity change from 0 to 512 [ 382.742541][T27552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.755878][T22572] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.781340][T22572] EXT4-fs (loop0): I/O error while writing superblock [ 382.791534][T22572] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:18: unable to read itable block [ 382.814190][T27552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 382.822171][T27552] System zones: 1-12 [ 382.828656][T22572] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.845669][T27552] EXT4-fs (loop3): 1 truncate cleaned up [ 382.853889][T22572] EXT4-fs (loop0): I/O error while writing superblock [ 382.861959][T26943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.878967][T26943] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 382.887260][T26943] EXT4-fs (loop0): I/O error while writing superblock [ 382.894466][T27552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.914637][T27530] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 382.935716][T26943] bridge0: port 3(syz_tun) entered disabled state [ 382.982807][T26943] syz_tun (unregistering): left allmulticast mode [ 382.989348][T26943] syz_tun (unregistering): left promiscuous mode [ 382.995696][T26943] bridge0: port 3(syz_tun) entered disabled state [ 383.087832][T27565] loop1: detected capacity change from 0 to 256 [ 383.132422][T27245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.152419][T27565] FAT-fs (loop1): IO charset maccenteuro not found [ 383.199417][T22572] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.307915][T22572] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.321020][T27572] netlink: 'syz.1.8152': attribute type 10 has an invalid length. [ 383.328929][T27572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8152'. [ 383.387136][T27572] ipvlan0: entered promiscuous mode [ 383.393135][T27572] ipvlan0: entered allmulticast mode [ 383.398570][T27572] veth0_vlan: entered allmulticast mode [ 383.418160][T27572] bridge0: port 3(ipvlan0) entered blocking state [ 383.424725][T27572] bridge0: port 3(ipvlan0) entered disabled state [ 383.432544][T27572] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 383.451535][T22572] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.527516][T22572] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.565241][T27583] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8155'. [ 383.579201][T27571] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 383.597710][T22572] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.626411][T22572] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.645808][T27599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8161'. [ 383.665685][T22572] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.689955][T22572] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.698678][T27601] loop1: detected capacity change from 0 to 512 [ 383.712994][T22572] bridge_slave_1: left allmulticast mode [ 383.718712][T22572] bridge_slave_1: left promiscuous mode [ 383.724337][T22572] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.746408][T22572] bridge_slave_0: left allmulticast mode [ 383.752163][T22572] bridge_slave_0: left promiscuous mode [ 383.757930][T22572] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.767810][T27601] EXT4-fs (loop1): bad s_min_extra_isize: 65528 [ 383.922636][T22572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.956470][T22572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.997787][T22572] bond0 (unregistering): Released all slaves [ 384.061922][T22572] tipc: Left network mode [ 384.160326][T22572] hsr_slave_0: left promiscuous mode [ 384.169516][T22572] hsr_slave_1: left promiscuous mode [ 384.187859][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.189217][T27620] loop1: detected capacity change from 0 to 8192 [ 384.195347][T22572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.224296][T22572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.232568][T22572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.265644][T22572] veth1_macvtap: left promiscuous mode [ 384.271245][T22572] veth1_vlan: left promiscuous mode [ 384.276486][T22572] veth0_vlan: left promiscuous mode [ 384.316323][T27620] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 384.324101][T27620] loop1: p4 start 3388997632 is beyond EOD, truncated [ 384.557301][T22572] team0 (unregistering): Port device team_slave_1 removed [ 384.580450][T22572] team0 (unregistering): Port device team_slave_0 removed [ 384.779742][T27633] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 385.115363][T27644] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 385.151639][T27668] loop3: detected capacity change from 0 to 128 [ 385.715312][T27673] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 386.310512][T27703] loop2: detected capacity change from 0 to 128 [ 386.365193][T27703] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.422452][T27703] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.460680][T27729] loop1: detected capacity change from 0 to 128 [ 386.479586][T27734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8200'. [ 386.490636][T27704] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 386.505143][T27053] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.590563][T27737] loop3: detected capacity change from 0 to 512 [ 386.813646][T27737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.000893][T27737] EXT4-fs (loop3): orphan cleanup on readonly fs [ 387.018340][T27737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8200: bg 0: block 248: padding at end of block bitmap is not set [ 387.044597][T27737] Quota error (device loop3): write_blk: dquota write failed [ 387.052014][T27737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 387.061934][T27737] EXT4-fs error (device loop3): ext4_acquire_dquot:6844: comm syz.3.8200: Failed to acquire dquot type 1 [ 387.247812][T27737] EXT4-fs (loop3): 1 truncate cleaned up [ 387.302342][T27737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.348601][T27737] TCP: TCP_TX_DELAY enabled [ 387.447879][T27750] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 387.540482][T27245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.175622][T27780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8207'. [ 388.225395][T27785] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 388.400657][T27789] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 388.545127][T27803] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.552445][T27803] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.759597][T27808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8213'. [ 389.264616][T27815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8215'. [ 389.273606][T27815] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8215'. [ 389.396195][T27830] pim6reg1: entered promiscuous mode [ 389.401574][T27830] pim6reg1: entered allmulticast mode [ 389.442268][T27836] loop3: detected capacity change from 0 to 1024 [ 389.478163][T27818] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 389.494463][ T29] audit: type=1400 audit(1721138087.107:6769): avc: denied { lock } for pid=27839 comm="syz.1.8224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=100714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 389.528951][T27836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.778328][T27245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.004081][T27850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8225'. [ 390.725396][T27879] pim6reg1: entered promiscuous mode [ 390.730867][T27879] pim6reg1: entered allmulticast mode [ 390.777485][T27858] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 390.786786][T27870] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.794030][T27870] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.986387][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8233'. [ 391.996424][T27936] loop1: detected capacity change from 0 to 512 [ 392.084741][T27936] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8244: bg 0: block 35: padding at end of block bitmap is not set [ 392.147334][T27929] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 392.168357][T27936] EXT4-fs (loop1): Remounting filesystem read-only [ 392.176816][T27936] EXT4-fs (loop1): 1 truncate cleaned up [ 392.197733][T27936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.224831][T27936] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 392.231707][T27936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.427588][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8252'. [ 392.633890][T27972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8251'. [ 393.546609][T27997] syzkaller0: entered promiscuous mode [ 393.552124][T27997] syzkaller0: entered allmulticast mode [ 393.586110][T27980] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 394.887383][T28018] loop2: detected capacity change from 0 to 512 [ 394.960458][T28018] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8265: bg 0: block 35: padding at end of block bitmap is not set [ 395.041351][T28018] EXT4-fs (loop2): Remounting filesystem read-only [ 395.073217][T28018] EXT4-fs (loop2): 1 truncate cleaned up [ 395.102797][T28018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.148686][T28022] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 395.157281][T28018] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 395.170750][T28046] pim6reg1: entered promiscuous mode [ 395.176231][T28046] pim6reg1: entered allmulticast mode [ 395.182193][T28018] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.648901][T28057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8276'. [ 396.735432][T28070] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 396.769613][T28086] syzkaller0: entered promiscuous mode [ 396.775103][T28086] syzkaller0: entered allmulticast mode [ 396.898971][T28099] loop1: detected capacity change from 0 to 512 [ 396.933211][T28099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8290: bg 0: block 35: padding at end of block bitmap is not set [ 396.996066][T28099] EXT4-fs (loop1): Remounting filesystem read-only [ 397.002615][T28099] EXT4-fs (loop1): 1 truncate cleaned up [ 397.082128][T28099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.125488][T28099] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 397.132340][T28099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.437143][ T29] audit: type=1326 audit(1721138095.354:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.2.8297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f43718bd9 code=0x0 [ 398.503747][T28116] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 398.537023][ T29] audit: type=1400 audit(1721138095.447:6771): avc: denied { mount } for pid=28137 comm="syz.4.8300" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 398.695974][T28146] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 398.781453][ T29] audit: type=1400 audit(1721138095.474:6772): avc: denied { unmount } for pid=27020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 398.952277][T28141] loop1: detected capacity change from 0 to 256 [ 399.385482][T28142] ================================================================== [ 399.393564][T28142] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 399.400661][T28142] [ 399.402965][T28142] write to 0xffff888107399580 of 8 bytes by task 28145 on cpu 0: [ 399.410659][T28142] exit_mm+0x9c/0x190 [ 399.414625][T28142] do_exit+0x556/0x1710 [ 399.418762][T28142] do_group_exit+0x102/0x150 [ 399.423335][T28142] get_signal+0xf2f/0x1080 [ 399.427739][T28142] arch_do_signal_or_restart+0x95/0x4b0 [ 399.433271][T28142] syscall_exit_to_user_mode+0x59/0x130 [ 399.438806][T28142] do_syscall_64+0xd6/0x1c0 [ 399.443290][T28142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.449174][T28142] [ 399.451478][T28142] read to 0xffff888107399580 of 8 bytes by task 28142 on cpu 1: [ 399.459085][T28142] mm_update_next_owner+0x1c9/0x460 [ 399.464267][T28142] exit_mm+0xdc/0x190 [ 399.468232][T28142] do_exit+0x556/0x1710 [ 399.472371][T28142] do_group_exit+0x102/0x150 [ 399.476943][T28142] get_signal+0xf2f/0x1080 [ 399.481347][T28142] arch_do_signal_or_restart+0x95/0x4b0 [ 399.486879][T28142] syscall_exit_to_user_mode+0x59/0x130 [ 399.492417][T28142] do_syscall_64+0xd6/0x1c0 [ 399.496904][T28142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.502787][T28142] [ 399.505092][T28142] value changed: 0xffff888103da1500 -> 0x0000000000000000 [ 399.512178][T28142] [ 399.514480][T28142] Reported by Kernel Concurrency Sanitizer on: [ 399.520617][T28142] CPU: 1 PID: 28142 Comm: syz.3.8298 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 399.530403][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 399.540439][T28142] ================================================================== SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 400.301424][ T29] audit: type=1400 audit(1721138097.079:6773): avc: denied { write } for pid=3070 comm="syz-executor" path="pipe:[518]" dev="pipefs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 400.759497][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.876746][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.942488][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.998493][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.095359][ T28] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.115134][ T28] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.145711][ T28] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.168742][ T28] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.190778][ T28] bridge_slave_1: left allmulticast mode [ 401.196417][ T28] bridge_slave_1: left promiscuous mode [ 401.202154][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.224345][ T28] bridge_slave_0: left allmulticast mode [ 401.229987][ T28] bridge_slave_0: left promiscuous mode [ 401.235658][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.407916][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.429768][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.452464][ T28] bond0 (unregistering): Released all slaves [ 401.560619][ T28] hsr_slave_0: left promiscuous mode [ 401.581378][ T28] hsr_slave_1: left promiscuous mode [ 401.587163][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.595192][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.614139][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.621626][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.637551][ T28] veth1_macvtap: left promiscuous mode [ 401.643127][ T28] veth0_macvtap: left promiscuous mode [ 401.648688][ T28] veth1_vlan: left promiscuous mode [ 401.654133][ T28] veth0_vlan: left promiscuous mode [ 401.828614][ T28] team0 (unregistering): Port device team_slave_1 removed [ 401.860955][ T28] team0 (unregistering): Port device team_slave_0 removed [ 402.319705][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.384134][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.458499][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.588709][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.668181][ T28] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.687373][ T28] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.719445][ T28] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.740624][ T28] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.762897][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.852025][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.893809][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.936733][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.995424][ T28] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.012252][ T28] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.044845][ T28] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.066096][ T28] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.089387][ T28] bridge_slave_1: left allmulticast mode [ 403.095034][ T28] bridge_slave_1: left promiscuous mode [ 403.100715][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.128873][ T28] bridge_slave_0: left allmulticast mode [ 403.134570][ T28] bridge_slave_0: left promiscuous mode [ 403.140304][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.172113][ T28] bridge_slave_1: left allmulticast mode [ 403.177843][ T28] bridge_slave_1: left promiscuous mode [ 403.183555][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.204703][ T28] bridge_slave_0: left allmulticast mode [ 403.210403][ T28] bridge_slave_0: left promiscuous mode [ 403.216034][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.553662][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.566397][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.576884][ T28] bond0 (unregistering): Released all slaves [ 403.597667][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.610389][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.630697][ T28] bond0 (unregistering): Released all slaves [ 403.759699][ T28] hsr_slave_0: left promiscuous mode [ 403.765413][ T28] hsr_slave_1: left promiscuous mode [ 403.775537][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.783122][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.814076][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.821481][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.848252][ T28] hsr_slave_0: left promiscuous mode [ 403.853957][ T28] hsr_slave_1: left promiscuous mode [ 403.865484][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.872895][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.909110][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.916615][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.946177][ T28] veth1_macvtap: left promiscuous mode [ 403.951726][ T28] veth0_macvtap: left promiscuous mode [ 403.957251][ T28] veth1_vlan: left promiscuous mode [ 403.962475][ T28] veth0_vlan: left promiscuous mode [ 403.995728][ T28] veth1_macvtap: left promiscuous mode [ 404.001203][ T28] veth0_macvtap: left promiscuous mode [ 404.006726][ T28] veth1_vlan: left promiscuous mode [ 404.012127][ T28] veth0_vlan: left promiscuous mode [ 404.331956][ T28] team0 (unregistering): Port device team_slave_1 removed [ 404.365016][ T28] team0 (unregistering): Port device team_slave_0 removed [ 404.508482][ T28] team0 (unregistering): Port device team_slave_1 removed [ 404.527517][ T28] team0 (unregistering): Port device team_slave_0 removed